ClawHub

Gong

v1.1.0

Gong API for searching calls, transcripts, and conversation intelligence. Use when working with Gong call recordings, sales conversations, transcripts, meeting data, or conversation analytics. Supports listing calls, fetching transcripts, user management, and activity stats.

⭐ 1· 2k·2 current·4 all-time
byJonathan Rhyne@jdrhyne
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the behavior: the SKILL.md and script only call Gong endpoints using credentials from ~/.config/gong/credentials.json. Requested access (the credentials file) is appropriate for the stated purpose.
ℹ
Instruction Scope
Instructions and the provided shell script limit actions to reading the specified credentials file and calling the user-provided Gong base_url endpoints. They do not attempt to read other system files or call external endpoints beyond the configured base_url. Note: the SKILL.md/script reference the optional GONG_CREDS env var but that environment variable is not declared in the registry metadata.
✓
Install Mechanism
No install spec and the skill is instruction-only plus a small helper script — nothing is downloaded or installed automatically, which minimizes install-time risk.
ℹ
Credentials
The skill requires a credentials JSON (base_url, access_key, secret_key) which is proportional for calling the Gong API. Minor inconsistency: no required env vars or binaries are declared in the registry metadata, yet the script uses environment variable GONG_CREDS and depends on external tools (curl, jq, base64, date).
✓
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It does not modify other skills or system-wide settings; it only reads its own credentials file.
Assessment
This skill appears to do what it claims: read a local Gong credentials JSON and call Gong API endpoints. Things to check before installing: 1) Ensure you only place a Gong API key with minimal (read-only) scope in ~/.config/gong/credentials.json and keep that file access-limited. 2) Confirm the skill will call only your configured base_url (the script uses whatever base_url is in the credentials file). 3) The helper script depends on curl, jq, base64 and standard date — make sure those are available; the registry metadata does not list these dependencies. 4) Because the skill will send transcripts and call metadata to Gong, review your Gong API key permissions and rotate keys if needed. 5) Source/homepage is absent; if you require provenance, ask the publisher for upstream source or a repository before trusting it in sensitive environments.

Like a lobster shell, security has layers — review code before you run it.

latestvk9758h396ccse8ar2xvnyhqrjs812sw2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎙️ Clawdis
Config~/.config/gong/credentials.json

Comments