AI Boss Assistant

Transform any AI into a professional executive assistant with battle-tested personas and workflows. Complete templates for Google Workspace integration (Gmail, Calendar, Drive), milestone delivery system, and security guidelines.

Install only in a sandbox or dedicated assistant workspace first. Use a dedicated Google account where possible, grant only the specific OAuth scopes you need, protect credential and token files, disable or ignore browser-login automation unless you need it, and require explicit confirmation before sending email, sharing files, modifying calendars, pushing git changes, spending money, or submitting forms.

Type: OpenClaw Skill Name: ai-boss-assistant Version: 1.0.2 The skill is classified as suspicious due to its reliance on high-risk capabilities, despite extensive documentation outlining security best practices. Key indicators include the request for broad Google Workspace permissions (`gmail,calendar,drive,docs,sheets`) via the `gog` CLI (detailed in `SKILL.md` and `gog/` files), the availability of arbitrary command execution (`exec` tool listed in `meta/Clawdbot 技能與工具總覽.md`), and web automation capabilities via `agent-browser` (demonstrated in `browser/KKTIX_範例訂票腳本.md`). While the persona and security guidelines (`agent-persona/RULES.md`, `security/AI老闆助理資安防護說明.md`) attempt to mitigate these risks by emphasizing transparency, user confirmation for sensitive actions, and not sharing private data, the inherent power of these tools presents a significant attack surface if the AI agent is compromised or prompted maliciously. The absence of a `.gitignore` file in the bundle, despite being recommended in `完整性檢查報告.md`, is a minor security oversight for credential protection.