← Back to Skills Marketplace
17661
Downloads
21
Stars
22
Active Installs
8
Versions
Install in OpenClaw
/install google-workspace-admin
Description
Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for users, groups, organizational units, roles,...
Usage Guidance
Before installing, confirm you trust Maton as the API/OAuth gateway, use a least-privileged Google admin account, restrict OAuth scopes to the resources needed, always verify the exact write operation before approving it, and delete or revoke the connection when finished.
Capability Analysis
Type: OpenClaw Skill
Name: google-workspace-admin
Version: 1.0.7
The google-workspace-admin skill provides a legitimate interface for managing Google Workspace resources via the Maton API proxy (api.maton.ai). The SKILL.md file contains strong defensive instructions for the AI agent, explicitly requiring it to obtain user approval and display full request details before performing any high-impact write operations. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code examples are standard API interactions consistent with the skill's stated administrative purpose.
Capability Assessment
Purpose & Capability
The stated purpose matches the capability: administering Google Workspace users, groups, organizational units, roles, and domain settings. This is inherently high-impact, but the artifact clearly discloses that it is write-capable administrative access.
Instruction Scope
The instructions tell the agent to default to read-only operations and require explicit user approval with exact method, endpoint path, and target identifier before writes. That is an appropriate control, but users should still review write requests carefully.
Install Mechanism
There is no install script or bundled code; the skill is instruction-only and the examples are user-directed Python snippets that call the Maton API.
Credentials
The skill requires network access and a MATON_API_KEY to use a third-party API gateway for Google Workspace Admin SDK calls. This is proportionate to the integration, but sensitive.
Persistence & Privilege
OAuth connections can remain active until deleted or revoked. The artifact includes connection deletion guidance and repeatedly recommends revoking access after administrative work is complete.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install google-workspace-admin - After installation, invoke the skill by name or use
/google-workspace-admin - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- Stricter security: All write operations now require explicit user approval showing the exact HTTP method, endpoint path, and resource identifier before execution.
- Documentation clarified: Description, permissions, and security sections updated for greater emphasis on least-privileged access and connection targeting.
- API usage guidance improved: Users must always specify the `Maton-Connection` header to prevent misrouted admin requests.
- Endpoints restricted: Only documented API endpoints are supported; constructing arbitrary paths is no longer allowed.
- Warnings expanded: All high-impact actions must show detailed consequences and require user confirmation.
v1.0.6
- Updated documentation to emphasize the high-impact, write-capable nature of this integration.
- Added strong warnings to use least-privilege admin accounts and OAuth scopes, and to revoke connections when not needed.
- Clarified that all write operations (create, update, delete) require explicit user approval with specific resource identification and summary of consequences.
- Instructed users to confirm resource details via read operations before proceeding with any administrative change.
- Expanded guidance on security, permissions, and the irreversible impact of admin operations across the domain.
v1.0.5
- Changed all API endpoints from gateway.maton.ai and ctrl.maton.ai to api.maton.ai for a unified base URL.
- Updated connection management instructions to use api.maton.ai, including listing, creating, and deleting connections.
- Clarified security and permission details; emphasized explicit user approval before running write operations.
- Removed LICENSE.txt from the project files.
v1.0.4
- Added a homepage field (https://maton.ai) to the skill metadata.
- No changes to code or functionality.
v1.0.3
- Added new metadata fields under the "metadata" section for better skill description and requirements clarity.
- Introduced a "clawdbot" section specifying a required environment variable (MATON_API_KEY) and an emoji indicator.
- No core functionality changes; documentation and metadata improvements only.
v1.0.2
No changes detected in this release.
- Version number incremented to 1.0.2
- No file or documentation changes identified
v1.0.1
- Added a note to the description directing users to use the api-gateway skill for other third party apps.
- Replaced all bash/curl CLI examples with Python code snippets using urllib and os libraries.
- Updated authentication header examples to use the $MATON_API_KEY environment variable in shell snippets.
- No changes to the API or underlying functionality; documentation improvements only.
v1.0.0
Initial release of Google Workspace Admin SDK integration.
- Manage users, groups, organizational units, and domain settings via a unified API gateway.
- Supports managed OAuth authentication and multiple account connections.
- Includes detailed API reference and example curl commands for common user and group operations.
- Requires a Maton API key and offers tools to manage OAuth connections.
- Provides features such as user creation, group membership management, and organizational unit administration.
Metadata
Frequently Asked Questions
What is Google Workspace Admin?
Google Workspace Admin SDK integration with managed OAuth. This is a write-capable administrative integration for users, groups, organizational units, roles,... It is an AI Agent Skill for Claude Code / OpenClaw, with 17661 downloads so far.
How do I install Google Workspace Admin?
Run "/install google-workspace-admin" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Google Workspace Admin free?
Yes, Google Workspace Admin is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Google Workspace Admin support?
Google Workspace Admin is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Google Workspace Admin?
It is built and maintained by byungkyu (@byungkyu); the current version is v1.0.7.
More Skills