ClawHub

Gog Xiaoshu

v1.0.0

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

⭐ 0· 31·0 current·0 all-time
by@xiaomaju-888
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Google Workspace CLI) match the runtime requirements: the skill requires a 'gog' binary and documents OAuth client credentials and per-account auth. Asking for a CLI and OAuth setup is appropriate for this purpose.
✓
Instruction Scope
SKILL.md only instructs the agent/user to install/use the 'gog' CLI, perform OAuth setup with a client_secret.json, set an optional GOG_ACCOUNT env var, and run workspace commands. It does not instruct reading unrelated host files or sending data to unexpected endpoints.
ℹ
Install Mechanism
Install uses a third-party Homebrew tap (steipete/tap/gogcli) which will install a binary. Homebrew taps are a common install mechanism but are not the official Homebrew/core; reviewing the tap's formula/repo before installing is prudent.
✓
Credentials
The skill declares no required environment variables or credentials. SKILL.md mentions an optional GOG_ACCOUNT env var and user-provided OAuth client secrets — both are proportional and expected for a Google Workspace CLI.
✓
Persistence & Privilege
The skill is not always-enabled and does not request system-wide config changes. It is user-invocable and can be invoked by the agent (default), which is normal for skills.
Assessment
This skill is internally consistent with a Google Workspace CLI: it expects you to install the 'gog' binary and perform OAuth with your client_secret.json. Before installing, review the Homebrew tap (steipete/tap/gogcli) and the project's source to confirm you trust the publisher. Keep your OAuth client_secret.json private, grant only the minimal API scopes you need, and be cautious when running commands that send mail or modify data (confirm prompts or run with --no-input only in scripted, trusted contexts).

Like a lobster shell, security has layers — review code before you run it.

latestvk97ech1q7bbzxaqa7gmhjhbnyx849bxs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎮 Clawdis
Binsgog

Install

Install gog (brew)
Bins: gog
brew install steipete/tap/gogcli

Comments