← Back to Skills Marketplace
4825
Downloads
7
Stars
22
Active Installs
1
Versions
Install in OpenClaw
/install gmail-oauth
Description
Set up Gmail API access via gog CLI with manual OAuth flow. Use when setting up Gmail integration, renewing expired OAuth tokens, or troubleshooting Gmail authentication on headless servers.
Usage Guidance
Install only if you are intentionally setting up Gmail access for gog and trust that CLI. Use the narrowest Gmail scope that works for your needs, avoid putting the keyring password in .bashrc when possible, protect the OAuth client secret and refresh token, and revoke the app from your Google account when you no longer need it.
Capability Analysis
Type: OpenClaw Skill
Name: gmail-oauth
Version: 1.0.0
The skill bundle is designed to set up Gmail API access using the `gog` CLI and a manual OAuth flow. The `SKILL.md` provides clear, legitimate instructions for configuring a Google Cloud project and the `gog` CLI, with no evidence of prompt injection attempts. The `scripts/gmail-auth.sh` script reads `client_id` and `client_secret` from `~/.config/gogcli/credentials.json` and uses `curl` to exchange an authorization code for a refresh token with Google's official OAuth endpoint (`https://oauth2.googleapis.com/token`). The obtained refresh token is then imported into the `gog` CLI's keyring. All actions are directly aligned with the stated purpose and do not exhibit any malicious or high-risk behaviors such as unauthorized data exfiltration, persistence mechanisms, or arbitrary code execution.
Capability Assessment
Purpose & Capability
The stated purpose, documentation, and script all align around manual Gmail OAuth setup for gog; the default gmail.modify scope is powerful but directly related to Gmail integration and is disclosed.
Instruction Scope
Instructions are user-directed and focused on Google Cloud OAuth setup, scope selection, generating an auth URL, and exchanging a user-provided code; no prompt injection, hidden role changes, or unrelated agent instructions were found.
Install Mechanism
The skill depends on the external gog CLI installed from a Homebrew tap and uses a local shell script; this is disclosed and purpose-aligned, but users must separately trust gog and their Google OAuth client setup.
Credentials
The script reads gog's local OAuth client credentials, contacts Google's official OAuth token endpoint, writes a temporary token import file, and imports it into gog; no unrelated local file access, alternate network destination, or exfiltration path was evident.
Persistence & Privilege
Persistent delegated Gmail access via a refresh token is expected for this OAuth setup, but recommending GOG_KEYRING_PASSWORD in .bashrc and briefly storing the refresh token in a temp file are credential-handling risks users should understand.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install gmail-oauth - After installation, invoke the skill by name or use
/gmail-oauth - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - headless OAuth flow for Gmail API via gog CLI
Metadata
Frequently Asked Questions
What is Gmail OAuth Setup?
Set up Gmail API access via gog CLI with manual OAuth flow. Use when setting up Gmail integration, renewing expired OAuth tokens, or troubleshooting Gmail authentication on headless servers. It is an AI Agent Skill for Claude Code / OpenClaw, with 4825 downloads so far.
How do I install Gmail OAuth Setup?
Run "/install gmail-oauth" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Gmail OAuth Setup free?
Yes, Gmail OAuth Setup is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Gmail OAuth Setup support?
Gmail OAuth Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Gmail OAuth Setup?
It is built and maintained by kai-jar (@kai-jar); the current version is v1.0.0.
More Skills