Gmail Daily Briefing

Fetch Gmail emails from the last 24h, rank by importance, summarize into bullet points, and auto-create Google Calendar events for detected meetings.

Security Scan

The skill's code, instructions, and requested access are consistent with its stated purpose (reading Gmail and creating calendar events); it requires OAuth credentials and will store token.json, which is expected for this integration.

Purpose & Capability

Name/description match the included scripts: fetch_emails.py reads Gmail (Gmail API), create_event.py writes Calendar events (Calendar API). Required binary (python) and Python dependencies in requirements.txt are proportional to the stated functionality.

Instruction Scope

The SKILL.md and agent/instructions.md explicitly instruct the agent to accept a client_secret_*.json upload, write it to the project root, generate an OAuth URL, and instruct the user to paste the redirect URL back. These steps are required for OAuth but involve the agent handling sensitive files (client secret and eventual token.json). The instructions also require the agent to create a local venv and run pip—normal for Python-based skills.

Install Mechanism

No remote downloads or extract steps. The skill is instruction+source included in the package; dependencies are standard google-auth libraries from PyPI (requirements.txt). No unexpected external URLs are used by installers.

Credentials

No environment variables are requested. The skill requires OAuth client credentials (client_secret_*.json) and will create and persist token.json with Gmail readonly and calendar.events scopes—this is appropriate for the described functionality, but these files contain sensitive credentials/tokens and grant the skill access to the user's Gmail and calendar.

Persistence & Privilege

always is false and autonomous invocation is allowed (platform default). The skill stores token.json (and temporary .auth_state.json) in its project directory and auto-refreshes tokens—this is necessary to operate, but means the agent can access Gmail/Calendar when token.json exists. The skill does not request system-wide config changes or other skills' credentials.

Assessment

This skill appears to do what it says, but it requires you to provide Google OAuth credentials and will save an OAuth token (token.json) that lets the skill read your Gmail (readonly) and create calendar events. Before installing: (1) Only upload a client_secret JSON you created in your own Google Cloud project and that you trust the agent with; consider creating a separate project/app for least privilege. (2) Understand token.json grants ongoing access — revoke OAuth access in your Google account if you want to stop access. (3) If you prefer not to share credentials with a remote agent, run the setup locally yourself and only upload the resulting token.json if you trust the agent. (4) Review and test with a non-critical account first. The hardcoded timezone in create_event.py (Asia/Bangkok) and a small sorting bug in fetch_emails.py are functional issues (not security) you may want to adjust.

Email & Calendar Assistant Skill

Description

This skill reads Gmail emails, ranks them by importance, summarizes each email into bullet points, and creates Google Calendar events if an email contains a meeting or interview that is not already on the calendar.

Capabilities

• Read emails (read-only)
• Rank emails by importance
• Summarize emails into bullet points
• Detect meeting/interview emails
• Create Google Calendar events (only when not already added)

Installation

Via ClawHub (recommended):

clawhub install gmail-daily-briefing

Manual:

git clone https://github.com/Russidan-Nadee/gmail-daily-briefing.git ~/.clawdbot/skills/gmail-daily-briefing

Setup Instructions (First-Time Only)

Step 1 — Get Google API credentials

1. Go to Google Cloud Console
2. Create a new project (or select existing one)
3. In the left sidebar, go to APIs & Services → click Enable APIs and Services
4. Search and enable each of the following:
   • Gmail API
   • Google Calendar API
5. In the left sidebar, go to APIs & Services → OAuth consent screen
   • Click Get Started
   • Fill in App name and User support email → click Save and Continue
   • Under Audience → click Add Users → add your Google email → click Save
6. In the left sidebar, go to APIs & Services → Credentials
7. Click Create Credentials → OAuth client ID
8. Under Application type select Desktop app
9. Give it a name (e.g. Gmail Daily Briefing) → click Create
10. Click Download JSON → you'll get a file named client_secret_*.json

Step 2 — Connect to the agent

1. Send the client_secret_*.json file to the agent as an attachment
   • Via Telegram: send as a file (not photo) in your Clawdbot chat
   • Via Claude Desktop: drag and drop the file into the chat
   • Via other platforms: attach the file the same way you attach any document
2. The agent will print an authorization URL — click it to open in your browser
3. Log in with your Google account and click Allow
4. Your browser will redirect to a localhost page showing an error — this is normal
5. Copy the full URL from your browser address bar (starts with http://localhost/?...)
6. Paste that URL back to the agent

Step 3 — Done!

The agent will confirm: "Auth complete. I can now access your Gmail and Google Calendar."

From now on just say: "Summarize today's important emails"

Agent Instructions

See agent/instructions.md for full agent instructions (commands, auth setup, behavior).