功能描述

Use the Google Drive RAG CLI to search your synced personal documents, add tracking folders, or check the service account status.

使用说明 (SKILL.md)

Google Drive RAG CLI Skill

Name: Rag based on Google drive
Author: eladrave

When to use

Use this skill when the user asks you to search their personal documents via the Google Drive RAG API. This includes questions like "What is my Aetna ID?", "Search my drive for...", "Sync my drive", "What is the status of my sync?", "What is the service account email?", or "Renew my token".

Setup and Initialization

This skill includes a self-contained Python CLI tool in its directory.

Before running any commands, you MUST verify the environment is set up:

Check if ~/.agents/skills/driverag/.env exists.
- If it DOES NOT exist, you MUST ask the user to provide their API_URL and JWT_TOKEN.
- Once they provide them, create the .env file in the skill directory (~/.agents/skills/driverag/.env) with those values.
Check if the virtual environment exists (~/.agents/skills/driverag/venv).
- If it DOES NOT exist, create it: cd ~/.agents/skills/driverag && python3 -m venv venv
- Then install the requirements: source venv/bin/activate && pip install -r requirements.txt

Instructions

Once the environment is validated and the .env file is created, you can interact with the RAG system using the CLI tool.

ALWAYS run the CLI from the skill directory (~/.agents/skills/driverag/) and ALWAYS activate its virtual environment first.

Here are the commands you can run:

Search documents:
```
cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py search "$ARGUMENTS"
```
If the user passes specific folders, append them: python3 cli.py search "$ARGUMENTS" -f "Folder Name"

List all Indexed Files in the RAG Database:

cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py list-files

Check Sync Status:

cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py status

Sync documents:
```
cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py sync
```
To force a complete re-download and re-indexing of all files: python3 cli.py sync --force

Get Service Account Email:

cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py service-account

Renew Token:

cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py renew-token

Add a folder manually:

cd ~/.agents/skills/driverag && source venv/bin/activate && python3 cli.py add-folder "$ARGUMENTS"

Important notes

Do NOT hallucinate answers. ALWAYS run the cli.py search command to get the exact answer from the RAG system and output the exact response it gives you.
CRITICAL: If the user asks "What files do you have", "List my files", or "What documents are in the database", DO NOT use the search command! You MUST use the list-files command instead, because RAG semantic search cannot generate file lists.
If the CLI returns a 401 Unauthorized or warns that the token is about to expire, inform the user and automatically run the renew-token command to update their .env file.
When outputting the RAG search results to the user, ensure you include the citations/source documents exactly as the CLI returns them so the user knows where the information came from.

Examples

"Search my drive for my Aetna ID" -> Run the search command with "What is my Aetna ID?"
"What files do you have in the database?" -> Run the list-files command.
"What is the status of my sync?" -> Run the status command.
"What email should I share my folders with?" -> Run the service-account command.
"Renew my token" -> Run the renew-token command.

安全使用建议

Key things to consider before installing: - Metadata mismatch: The skill actually requires API_URL and JWT_TOKEN (sensitive) but the registry metadata doesn’t declare them — ask the publisher why these were omitted. - Trust the endpoint: The API_URL is arbitrary. Only provide an API_URL you trust; if it points to a malicious server it will receive your JWT_TOKEN and any requests made by the CLI. - Minimize privileges: If you must supply a token, prefer a scoped service account or token with the minimum permissions, not a full Google account credential. - Be cautious storing secrets: The skill instructs you to store credentials in ~/.agents/skills/driverag/.env. Storing tokens in skill directories can lead to persistent exposure; consider using a secure secret manager instead and avoid leaving long-lived tokens there. - Renew-token behavior: SKILL.md suggests automatically running renew-token and updating .env. The CLI prints the new token but does not itself write .env — watch for whether the agent will write the file for you. Don’t let the agent silently persist new credentials without explicit consent. - Verify outputs and logs: The CLI prints tokens on renew; those could be captured in logs. If you proceed, rotate tokens afterward and audit logs. - Ask for clarifications: Request the publisher to (1) declare required env vars in metadata, (2) document what the remote API_URL represents (who runs it), and (3) avoid instructions that automatically persist credentials. Given these mismatches and the sensitive handling of credentials, treat the skill as suspicious until the above issues are resolved or you can supply minimal, revocable credentials and a trusted API endpoint.

功能分析

Type: OpenClaw Skill Name: driverag Version: 1.0.3 The 'driverag' skill is a legitimate CLI tool designed to interface with a Google Drive RAG (Retrieval-Augmented Generation) service. The bundle includes a Python script (cli.py) that performs standard API operations such as searching, syncing, and token renewal using user-provided credentials (API_URL and JWT_TOKEN). The instructions in SKILL.md correctly guide the AI agent through environment setup and command execution without any evidence of malicious intent, data exfiltration, or unauthorized persistence.

能力评估

ℹ Purpose & Capability

The name/description (RAG for Google Drive) align with the included cli.py which talks to a RAG service. However, the skill metadata declares no required environment variables or primary credential while the SKILL.md and cli.py clearly require API_URL and JWT_TOKEN at runtime. That metadata omission is an incoherence.

⚠ Instruction Scope

SKILL.md instructs the agent to create and use a ~/.agents/skills/driverag/.env file containing API_URL and JWT_TOKEN and to run the CLI from the skill directory and venv. It also tells the agent to automatically run renew-token on 401s and to update the .env file — giving the agent discretion to write credentials to disk. The CLI contacts an arbitrary API_URL provided by the user; if that URL is untrusted it will receive the JWT_TOKEN. These file- and credential-writing instructions broaden scope beyond a simple search helper and could enable inadvertent credential storage or exfiltration.

✓ Install Mechanism

No install spec in registry (instruction-only), but SKILL.md asks to create a Python venv and pip install requirements.txt. requirements.txt is minimal (requests, python-dotenv). This is moderate/expected for a bundled Python CLI and does not itself look suspicious.

⚠ Credentials

The skill requires two sensitive environment values at runtime (API_URL and JWT_TOKEN) but the registry metadata lists none and no primary credential. Requiring a JWT and service endpoint is reasonable for a RAG service, but failing to declare them in metadata is a mismatch that reduces transparency. Additionally, SKILL.md directs storing JWT_TOKEN in a skill-local .env file and suggests automatically renewing/updating tokens — this increases the chance tokens are persisted and handled by the agent without clear user consent.

ℹ Persistence & Privilege

always:false (good). The skill instructs the agent to create files under ~/.agents/skills/driverag/ (venv and .env) and to run commands there; writing those files is normal for an instruction-only skill that includes a CLI, but it means the agent will hold persistent credentials in its skill directory if the user follows instructions. The ability to autonomously invoke renew-token combined with writing .env could let the agent update stored credentials — this is not blocked by skill metadata and should be considered by the user.

版本历史

v1.0.3

- Added instructions for the new renew-token CLI command to handle token renewal. - Included "Renew my token" as a supported user request and matching CLI operation. - Added guidance to automatically run renew-token if the CLI warns about token expiration. - Documented the --force argument for the sync command, allowing complete re-indexing. - Expanded examples and command instructions for improved clarity and coverage.

v1.0.2

- Added support and documentation for a new `list-files` command to list all indexed files in the RAG database. - Updated instructions and examples to clarify when to use the `list-files` command instead of semantic search. - Highlighted that file listing requests must use `list-files` and not the search command. - Expanded the examples section to include file listing scenarios.

v1.0.1

- Added instructions and command for checking the sync status with the new `status` command. - Clarified usage instructions to include sync status checks (e.g., "What is the status of my sync?"). - Updated usage examples to reflect the new status functionality.

v1.0.0

Initial release of the driverag skill: - Provides a CLI tool to search, sync, and manage Google Drive documents using the RAG API. - Requires API credentials (`API_URL`, `JWT_TOKEN`) and sets up a dedicated Python virtual environment. - Supports searching documents, syncing, adding folders, and retrieving the service account email via CLI commands. - Includes clear setup, initialization, and usage instructions. - Handles authentication errors and returns search results with full source citations.

元数据

Slug driverag

版本 1.0.3

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 4

常见问题

Rag based on Google drive 是什么？

Use the Google Drive RAG CLI to search your synced personal documents, add tracking folders, or check the service account status. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 123 次。

如何安装 Rag based on Google drive？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install driverag」即可一键安装，无需额外配置。

Rag based on Google drive 是免费的吗？

是的，Rag based on Google drive 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Rag based on Google drive 支持哪些平台？

Rag based on Google drive 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Rag based on Google drive？

由 eladrave（@eladrave）开发并维护，当前版本 v1.0.3。

Rag based on Google drive