Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Google Workspace Automation

Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-r...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 475 · 6 current installs · 6 all-time installs
byMuhammad Mazhar Saeed@0x-Professor
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description promise a scope-aware planning tool for Gmail/Drive/Sheets/Calendar; the bundled Python script and reference guide produce OAuth scope lists and auditable artifacts without performing API calls or requiring cloud credentials—this matches the stated purpose.
Instruction Scope
SKILL.md instructs running the included script and reading the guide. The script only reads a JSON input (with a 1MB cap) and writes an output artifact (json/md/csv). It performs no network requests and does not access other system secrets. Note: the script will create directories and write/overwrite the provided output path, so users should avoid giving privileged or sensitive filesystem paths as output.
Install Mechanism
No install spec; script is bundled in the skill (no downloads or external installers). This is low-risk and proportional for an instruction-only planning tool.
Credentials
No environment variables, credentials, or config paths are required. For a planner that only lists OAuth scopes and builds artifacts, this is appropriate. (Real integrations will need OAuth credentials for execution, but those are outside this skill's stated planning scope.)
Persistence & Privilege
Skill is not forced-always, does not request elevated persistence, and does not modify other skills or global agent config. Agent autonomy remains at the platform default.
Assessment
This skill appears to be a planning-only tool: it generates automation plans and OAuth-scope lists from a JSON input and writes an output file. Before using it, review the output path you provide (to avoid overwriting important files), inspect any input JSON for sensitive data, and remember this tool does not perform API actions—if you later implement the plan against Google Workspace you will need to supply and protect OAuth credentials separately. If you want the skill to actually execute automations, require and audit OAuth usage at that time.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk975vb6xx14c73dcq6740sync581x33n

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Google Workspace Automation

Overview

Create structured automation plans for common Gmail, Drive, Sheets, and Calendar workflows.

Workflow

  1. Define automation goal, services, and actions.
  2. Derive required OAuth scopes and integration boundaries.
  3. Build execution plan with schedule and retry behavior.
  4. Export auditable artifact for implementation.

Use Bundled Resources

  • Run scripts/plan_workspace_automation.py for deterministic automation planning.
  • Read references/workspace-guide.md for scope and quota considerations.

Guardrails

  • Always declare least-privilege scopes.
  • Keep automations idempotent and auditable.

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…