Morning Email Rollup

Daily morning rollup of important emails and calendar events at 8am with AI-generated summaries

Security Scan

The skill does what it claims at a high level (reads Gmail/calendar, summarizes with Gemini), but it omits or misdeclares important credentials/behavior and handles sensitive email bodies in ways that could leak data or surprise users.

Purpose & Capability

Name/description match the script: it queries Gmail and Google Calendar via the gog CLI and summarizes with gemini. However, the SKILL metadata and registry declare no required env/credentials even though the SKILL.md and rollup.sh require a configured Google account (GOG_ACCOUNT) and authenticated gog/gemini CLIs. The SKILL.md states summaries are "delivered to Telegram" but rollup.sh only prints output and writes a local log — there is no Telegram bot token or send-to-Telegram code in the script. That delivery claim is inconsistent with the code.

Instruction Scope

Runtime instructions and the script explicitly read full email bodies and pass them to the gemini CLI as part of a command-line prompt. Passing sensitive text on the command line can expose it to other local users via process listings; the script also writes summaries (sensitive content) to a local log file under $HOME/clawd. The SKILL.md tells the agent to set GOG_ACCOUNT but does not document other required authentication (gog/gemini auth). The instructions give broad discretion to edit search criteria and to 'read or search specific emails', which could escalate data access without additional checks.

Install Mechanism

No install spec (instruction-only + a shell script) — low install risk. But the skill depends on external, networked CLIs (gog and gemini). Those CLIs are not installed by the skill and must be trusted by the user; their installation/authentication is out-of-band and not documented in the registry metadata.

Credentials

Registry declares no required env vars or primary credential, but SKILL.md and rollup.sh require GOG_ACCOUNT and implicitly require gog/gemini authentication (tokens/credentials). The script also uses CLAWDBOT_WORKSPACE/CLAWDBOT behavior indirectly. Sensitive data (email bodies and AI summaries) are written to a local log file. Lack of declared credentials and the use of CLI tools that likely need API keys/refresh tokens is disproportionate and under-documented.

Persistence & Privilege

The skill does not request always:true and doesn't alter other skills. It writes logs to $HOME/clawd and creates temporary files; this persistence of email summaries is expected for a rollup but is security-sensitive and should be noted by users. Cron instructions show using an isolated session, which is good practice.

What to consider before installing

Before installing: be aware this script fetches full email bodies and passes them to the gemini CLI as part of a command-line argument (not stdin), which can expose content to other local users via process listings and will send your email text to whatever backend the gemini CLI uses. The skill omits declaring required credentials: you must have gog authenticated to access Gmail/Calendar and gemini authenticated to use the model; those tokens/credentials are not listed in the registry. The SKILL.md claims delivery to Telegram but the script only prints output and logs it locally — verify how the rollup will actually be delivered (your platform's cron wrapper may be forwarding stdout). If you proceed, consider: (1) verifying and trusting the installed gog/gemini CLIs and their backends, (2) modifying the script to avoid passing email bodies on the command line (use stdin or an authenticated API), (3) securing or rotating access tokens and protecting the log file (it stores summaries), and (4) ensuring you are comfortable with where cron output goes and whether any Telegram/bot tokens are required. If you want, ask the author to explicitly declare required env vars/credentials and to change the summarization to a safer input method that doesn't expose email contents in process arguments.

Automatically generates a daily summary of important emails and delivers it to Telegram at 8am Denver time.

Setup

Required: Set your Gmail account email:

export GOG_ACCOUNT="[e-mail]"

Or edit the script directly to set the default.

What It Does

• Runs every day at 8:00 AM (configurable timezone)
• Shows today's calendar events from Google Calendar
• Searches for emails marked as important or starred from the last 24 hours
• Uses AI (Gemini CLI) to generate natural language summaries of each email
• Shows up to 20 most important emails with:
  • 🔴 Unread indicator (red)
  • 🟢 Read indicator (green)
  • Sender name/email
  • Subject line
  • AI-generated 1-sentence summary (natural language, not scraped content)
• Delivers formatted summary to Telegram

Usage

Manual Run

# Default (10 emails)
bash skills/morning-email-rollup/rollup.sh

# Custom number of emails
MAX_EMAILS=20 bash skills/morning-email-rollup/rollup.sh
MAX_EMAILS=5 bash skills/morning-email-rollup/rollup.sh

View Log

cat $HOME/clawd/morning-email-rollup-log.md

How It Works

1. Checks calendar - Lists today's events from Google Calendar via gog
2. Searches Gmail - Query: is:important OR is:starred newer_than:1d
3. Fetches details - Gets sender, subject, date, and body for each email
4. AI Summarization - Uses Gemini CLI to generate natural language summaries
5. Formats output - Creates readable summary with read/unread markers
6. Sends to Telegram - Delivers via Clawdbot's messaging system

Calendar Integration

The script automatically includes today's calendar events from your Google Calendar using the same gog CLI that queries Gmail.

Graceful Fallback:

• If gog is not installed → Calendar section is silently skipped (no errors)
• If no events today → Calendar section is silently skipped
• If events exist → Shows formatted list with 12-hour times and titles

Requirements:

• gog must be installed and authenticated
• Uses the same Google account configured for Gmail (set via GOG_ACCOUNT environment variable)

Email Criteria

Emails are included if they match any of:

• Marked as Important by Gmail (lightning bolt icon)
• Manually Starred by you
• Received in the last 24 hours

AI Summarization

Each email is summarized using the Gemini CLI (gemini):

• Extracts the email body (cleans HTML/CSS)
• Sends to gemini --model gemini-2.0-flash with a prompt to summarize in 1 sentence
• The summary is medium-to-long length natural language (not scraped content)
• Falls back to cleaned body text if Gemini is unavailable

Important: The email body is passed as part of the prompt (not via stdin) because the gemini CLI doesn't handle piped input with prompts correctly.

Example output:

🔴 **William Ryan: Invitation to team meeting**
   The email invites you to a team meeting tomorrow at 2pm to discuss the Q1 roadmap and assign tasks for the upcoming sprint.

Read/Unread Indicators

• 🔴 Red dot = Unread email
• 🟢 Green dot = Read email

All emails show one of these markers for visual consistency.

Formatting Notes

Subject and Summary Cleanup:

• Extra quotes are automatically stripped from subject lines (e.g., ""Agent Skills"" → Agent Skills)
• Summaries from Gemini are also cleaned of leading/trailing quotes
• This ensures clean, readable output in Telegram/other channels

Cron Schedule

Set up a daily cron job at your preferred time:

cron add --name "Morning Email Rollup" \
  --schedule "0 8 * * *" \
  --tz "America/Denver" \
  --session isolated \
  --message "GOG_ACCOUNT=[e-mail] bash /path/to/skills/morning-email-rollup/rollup.sh"

Adjust the time (8:00 AM) and timezone to your preference.

Customization

Change Number of Emails

By default, the rollup shows 10 emails. To change this:

Temporary (one-time):

MAX_EMAILS=20 bash skills/morning-email-rollup/rollup.sh

Permanent: Edit skills/morning-email-rollup/rollup.sh:

MAX_EMAILS="${MAX_EMAILS:-20}"  # Change 10 to your preferred number

Change Search Criteria

Edit skills/morning-email-rollup/rollup.sh:

# Current: important or starred from last 24h
IMPORTANT_EMAILS=$(gog gmail search 'is:important OR is:starred newer_than:1d' --max 20 ...)

# Examples of other searches:
# Unread important emails only
IMPORTANT_EMAILS=$(gog gmail search 'is:important is:unread newer_than:1d' --max 20 ...)

# Specific senders
IMPORTANT_EMAILS=$(gog gmail search 'from:[e-mail] OR from:[e-mail] newer_than:1d' --max 20 ...)

# By label/category
IMPORTANT_EMAILS=$(gog gmail search 'label:work is:important newer_than:1d' --max 20 ...)

Change Time

Update the cron schedule:

# List cron jobs to get the ID
cron list

# Update schedule (example: 7am instead of 8am)
cron update <job-id> --schedule "0 7 * * *" --tz "America/Denver"

Change Summary Style

Edit the prompt in the summarize_email() function in rollup.sh:

# Current: medium-to-long 1 sentence
"Summarize this email in exactly 1 sentence of natural language. Make it medium to long length. Don't use quotes:"

# Shorter summaries
"Summarize in 1 short sentence:"

# More detail
"Summarize in 2-3 sentences with key details:"

Change AI Model

Edit the gemini command in summarize_email():

# Current: gemini-2.0-flash (fast)
gemini --model gemini-2.0-flash "Summarize..."

# Use a different model
gemini --model gemini-pro "Summarize..."

Troubleshooting

Not receiving rollups

# Check if cron job is enabled
cron list

# Check last run status
cron runs <job-id>

# Test manually
bash skills/morning-email-rollup/rollup.sh

Missing emails

• Gmail's importance markers may filter out expected emails
• Check if emails are actually marked important/starred in Gmail
• Try running manual search: gog gmail search 'is:important newer_than:1d'

Summaries not appearing

• Check if gemini CLI is installed: which gemini
• Test manually: echo "test" | gemini "Summarize this:"
• Verify Gemini is authenticated (it should prompt on first run)

Wrong timezone

• Cron uses America/Denver (MST/MDT)
• Update with: cron update <job-id> --tz "Your/Timezone"

Log History

All rollup runs are logged to:

$HOME/clawd/morning-email-rollup-log.md

Format:

- [2026-01-15 08:00:00] 🔄 Starting morning email rollup
- [2026-01-15 08:00:02] ✅ Rollup complete: 15 emails