Google Docs Formatter

PassAudited by VirusTotal on May 10, 2026.

Overview

Type: OpenClaw Skill Name: google-docs-formatter Version: 1.0.0 The 'google-docs-formatter' skill is an instruction-only workflow (SKILL.md) designed to guide an AI agent in using an external CLI tool ('gog') for Google Docs management. It contains no executable code, scripts, or hidden payloads, and explicitly includes safety instructions requiring user approval before performing destructive or major write operations.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken document ID or approved change could modify or remove content in a Google Doc.

Why it was flagged

The skill can direct write, clear, replacement, and deletion operations against Google Docs. The approval requirements make this purpose-aligned, but the commands can materially alter user documents.

Skill content
Before any write operation, state the target document and intended change, then get explicit user approval... Always ask before: - `gog docs clear` ... deleting text ranges
Recommendation

Confirm the document ID, review the proposed change, and require explicit approval before any write, clear, replacement, or deletion command.

What this means

The agent may act on Google Docs available to the authenticated gog account.

Why it was flagged

All actions are performed through the existing gog authorization context, so this skill inherits whatever Google Docs/Drive account access and scopes gog already has.

Skill content
Rely on `gog` for all Google Docs and Drive operations.
Recommendation

Use this only with a trusted gog installation and verify which Google account and scopes gog is using before editing important or shared documents.

What this means

The safety of actual Google Docs operations depends on the separate gog tool the user has installed or loaded.

Why it was flagged

The reviewed artifact delegates behavior to a separate gog skill/CLI that is not included in this artifact set, so its implementation and provenance are outside this review.

Skill content
If the gog skill is not loaded and command details are needed, load the `gog` skill first.
Recommendation

Review and trust the gog skill/CLI separately before allowing this formatter workflow to use it.

What this means

Sensitive document text may remain in local temporary files after the formatting task.

Why it was flagged

The workflow exports document content to local files for inspection and comparison, which can leave copies of Google Doc contents on disk.

Skill content
gog docs export <DOC_ID> --format md --out /tmp/doc.md
Recommendation

Avoid using this on highly sensitive docs unless local temporary files are acceptable, and clean up exported files such as /tmp/doc.md and /tmp/doc-after.md when finished.