功能描述

Google Keep notes via gkeepapi. List, search, create, manage notes. Add items to notes. Supports authorization via OAuth 2.0 Token.

使用说明 (SKILL.md)

Google Keep Notes Skill 📝

Name: Manage Google Keep notes
Author: promptingpufferfish

WHEN TO USE

Use this skill when users ask to:

List Google Keep notes
Search notes by keyword
Create new notes
Add items to notes
Get specific note details
Archive/pin/delete notes

"List" = Google Keep note (not a bullet list)

SETUP (First Run Only)

Creates venv + installs requirements automatically
Manual call of generate_token.py from the shell, then copy & paste token to file $HOME/.config/gkeep/token.json.

gkeep.py list [--limit 10]                    # List notes
gkeep.py search "note_name"                   # Search notes  
gkeep.py get \x3Cnote_id>                        # Get note details
gkeep.py create "note_name" "note_body"       # Create note
gkeep.py add \x3Cnote_id> "new item"             # Add item to note
gkeep.py archive \x3Cnote_id>                    # Archive note
gkeep.py delete \x3Cnote_id>                     # Trash note
gkeep.py pin \x3Cnote_id>                        # Pin note
gkeep.py unpin \x3Cnote_id>                      # Unpin note

USAGE FLOW

1. User: "Show my \x3Cnote_name>"
2. → gkeep.py list | grep \x3Cnote_name> → note_id
3. → gkeep.py get \x3Cnote_id> → show content
4. User: "Add milk to \x3Cnote_name>"
5. → gkeep.py list | grep \x3Cnote_name> → note_id 
6. → gkeep.py add \x3Cnote_id> "milk"

EXECUTION TEMPLATE

cd ~/.openclaw/workspace/skills/gkeep-notes
source venv/bin/activate
python gkeep.py [command] [args]

TROUBLESHOOTING

❌ "No token" → manually generate token with generate_token.py and copy token into token.json
❌ "Module not found" → setup properly
❌ "API changed" → Check GitHub issues

NOTES

Unofficial API (may break if Google changes)
venv auto-created during setup
Note IDs from gkeep list output
Active project (updated March 2026)

安全使用建议

This skill appears to do what it claims (manage Google Keep) but its authentication guidance is nonstandard and risky. It tells you to copy a browser oauth_token cookie and paste it into a token file — doing so may expose a session token that can be used to access your Google account. Before installing or using it: (1) review the generate_token.py and gkeep.py code yourself or with someone you trust; (2) prefer an official OAuth client flow (google-auth-oauthlib) instead of copying cookies or using gpsoauth if possible; (3) if you must use this skill, store token.json with restrictive permissions (the script does set 0o600 on login path, but manual token creation may not), keep backups out of sync, and revoke the token from your Google account if you stop using the skill; (4) verify the gpsoauth library and the repo source (the listed homepage should be reviewed) and avoid pasting secrets into untrusted terminals or editors. If you are uncomfortable with manual cookie extraction or a nonstandard auth path, do not install the skill.

功能分析

Type: OpenClaw Skill Name: gkeep-notes Version: 1.0.14 The gkeep-notes skill is a legitimate CLI wrapper for the gkeepapi library, allowing users to manage Google Keep notes. It includes a utility script (generate_token.py) to assist with OAuth 2.0 authentication and stores credentials locally in ~/.config/gkeep/token.json with restricted file permissions (0o600). While the README.md acknowledges a 'nonstandard' authentication flow involving manual cookie extraction, the code contains no evidence of data exfiltration, malicious execution, or prompt-injection attacks.

能力评估

ℹ Purpose & Capability

The code and docs implement Google Keep operations via gkeepapi (list, search, create, add, archive, delete, pin, etc.), which aligns with the skill name/description. Requiring only python3 (and typical Python packages) is proportionate. The use of authentication helpers (gpsoauth) is consistent with needing account access, but the chosen auth approach is unusual.

⚠ Instruction Scope

SKILL.md and README instruct the user to obtain an oauth_token by opening accounts.google.com/EmbeddedSetup, using browser devtools to copy the oauth_token cookie, and pasting it into a generator script — i.e., manual extraction of session cookies. That is nonstandard, sensitive, and could lead to accidental exposure of session cookies or misuse. Instructions also ask the user to write the token to $HOME/.config/gkeep/token.json (plaintext). The runtime commands themselves are limited to gkeepapi operations and local file writes; no remote, arbitrary endpoints are contacted outside Google APIs, but the cookie-extraction step is the key issue.

✓ Install Mechanism

No remote binary downloads or obscure installers: setup uses a Python venv and pip install -r requirements.txt. requirements.txt lists gkeepapi and Google client libraries, which are expected. No extract-from-URL installs or unusual third-party downloads are present.

ℹ Credentials

The skill declares no required environment variables and only optionally reads GKEEP_PASSWORD in login flow, which is reasonable. However the skill requires manual handling of a master token/session cookie and storing it in a local token.json; that storage is sensitive and not called out in the registry metadata. The number of secrets requested is small and relevant, but the method of obtaining the token (manual cookie copy or master login) is disproportionate compared to standard OAuth flows and increases risk of accidental credential disclosure.

✓ Persistence & Privilege

always:false and user-invocable:true (normal). The skill creates a venv in its workspace and writes a token file to $HOME/.config/gkeep/token.json; it does not request persistent system-wide privileges nor modify other skills. Storing a valid auth token locally grants broad access to the user's Google account until revoked, so the token file should be treated as a high-privilege artifact.

版本历史

v1.0.14

- Improved setup instructions to clarify manual token generation using generate_token.py. - Updated troubleshooting steps for clearer guidance on resolving "No token" and "API changed" errors. - Minor documentation cleanup and updated project activity date to March 2026. - Dropped redundant or confusing troubleshooting advice.

v1.0.13

- Updated version to 1.0.13. - Minor edits to setup instructions in documentation. - Removed a parenthetical explanation from the SETUP section for clarity.

v1.0.12

- Added clarification to setup instructions regarding OAuth 2.0 Token as the only authentication method tested with non-enterprise Google accounts. - Included a hint about ClawHub's session data warning during publish. - No other changes to usage, commands, or core functionality.

v1.0.11

- Bumped version to 1.0.11. - Updated SKILL.md metadata field version to 1.0.11 (no functional changes).

v1.0.10

- Bump version to 1.0.10 in SKILL.md. - No functional or documentation changes; version update only.

v1.0.9

- Bumped skill version from 1.0.8 to 1.0.9 in SKILL.md. - No functional or content changes; version update only.

v1.0.8

- Updated version number to 1.0.8. - Documentation refreshed in SKILL.md and README.md; no functional or command changes.

v1.0.7

- Updated description to specify authorization via OAuth 2.0 Token, instead of Authorization Code Flow. - No changes to features or commands. This update clarifies the authentication method.

v1.0.6

- Updated documentation in README.md and SKILL.md - Changed token file path in SKILL.md from `$HOME/.openclaw/.config/gkeep/token.json` to `$HOME/.config/gkeep/token.json`

v1.0.5

- Clarified setup instructions to require manual execution of generate_token.py and copying the token to the configuration file. - Replaced mention of automatic token saving with manual setup details in the SETUP section. - No changes to commands or usage flow.

v1.0.4

- Updated token storage path in documentation to `$HOME/.openclaw/.config/gkeep/token.json` for clarity and accuracy. - No changes to code or functionality; updates are documentation-only.

v1.0.3

- Updated documentation in README.md and SKILL.md for clarity. - Improved troubleshooting steps in SKILL.md (e.g., updated guidance for module import errors). - Removed explicit setup step from first run instructions (setup now runs automatically).

v1.0.2

- Fixed token file path in documentation (now `~/.config/gkeep/token.json`) - Clarified venv creation timing in notes - Minor wording and formatting improvements in setup and notes sections

v1.0.1

- Added mention of OAuth 2.0 Authorization Code Flow support in the skill description. - No changes to commands, setup instructions, or usage flow. - Documentation file (SKILL.md) updated only; no code changes.

v1.0.0

Initial release of Google Keep Notes skill. - Enables listing, searching, creating, and managing Google Keep notes. - Supports adding items, getting note details, archiving, pinning/unpinning, and deleting notes. - Simple setup with built-in virtual environment and requirements installation. - Command-line usage with clear command options for note management. - Includes troubleshooting steps and usage examples in documentation.

元数据

Slug gkeep-notes

版本 1.0.14

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 15

常见问题

Manage Google Keep notes 是什么？

Google Keep notes via gkeepapi. List, search, create, manage notes. Add items to notes. Supports authorization via OAuth 2.0 Token. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 258 次。

如何安装 Manage Google Keep notes？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install gkeep-notes」即可一键安装，无需额外配置。

Manage Google Keep notes 是免费的吗？

是的，Manage Google Keep notes 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Manage Google Keep notes 支持哪些平台？

Manage Google Keep notes 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Manage Google Keep notes？

由 PromptingPufferfish（@promptingpufferfish）开发并维护，当前版本 v1.0.14。

Manage Google Keep notes