Gog Litiao
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: gog-litiao Version: 1.0.0 The skill bundle provides a legitimate interface for the 'gog' CLI tool (gogcli.sh) to manage Google Workspace services like Gmail, Drive, and Sheets. It includes standard installation instructions via a Homebrew tap (steipete/tap/gogcli) and functional command examples for the AI agent. No evidence of malicious intent, data exfiltration to unauthorized endpoints, or prompt injection was found in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If authorized broadly, the CLI may access sensitive Gmail, Calendar, Drive, Contacts, Sheets, and Docs data for that Google account.
The skill asks the user to authorize OAuth access across several Google Workspace services, which is expected for the stated purpose but grants broad account authority.
`gog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docs`
Authorize only the Google account and services you actually need, and know how to revoke the OAuth grant if you stop using the skill.
A mistaken or over-broad instruction could send an unwanted email or alter/delete spreadsheet content.
The documented commands include sending email and modifying or clearing spreadsheet ranges. These actions are aligned with a Workspace CLI, but they can change third-party account data.
`gog gmail send ...`; `gog sheets update ...`; `gog sheets append ...`; `gog sheets clear <sheetId> "Tab!A2:Z"`
Require explicit user confirmation before any send, create, update, append, clear, copy, or delete operation, not just before mail or calendar changes.
Installing the skill means trusting the external gog CLI package and its update channel.
The skill depends on an external Homebrew tap to provide the executable. That is normal for a CLI wrapper, but the binary implementation was not included in the reviewed artifacts.
brew | formula: steipete/tap/gogcli | creates binaries: gog
Verify the Homebrew tap and gog CLI project before installing, and keep it updated from a trusted source.