← 返回 Skills 市场
4825
总下载
7
收藏
22
当前安装
1
版本数
在 OpenClaw 中安装
/install gmail-oauth
功能描述
Set up Gmail API access via gog CLI with manual OAuth flow. Use when setting up Gmail integration, renewing expired OAuth tokens, or troubleshooting Gmail authentication on headless servers.
安全使用建议
Install only if you are intentionally setting up Gmail access for gog and trust that CLI. Use the narrowest Gmail scope that works for your needs, avoid putting the keyring password in .bashrc when possible, protect the OAuth client secret and refresh token, and revoke the app from your Google account when you no longer need it.
功能分析
Type: OpenClaw Skill
Name: gmail-oauth
Version: 1.0.0
The skill bundle is designed to set up Gmail API access using the `gog` CLI and a manual OAuth flow. The `SKILL.md` provides clear, legitimate instructions for configuring a Google Cloud project and the `gog` CLI, with no evidence of prompt injection attempts. The `scripts/gmail-auth.sh` script reads `client_id` and `client_secret` from `~/.config/gogcli/credentials.json` and uses `curl` to exchange an authorization code for a refresh token with Google's official OAuth endpoint (`https://oauth2.googleapis.com/token`). The obtained refresh token is then imported into the `gog` CLI's keyring. All actions are directly aligned with the stated purpose and do not exhibit any malicious or high-risk behaviors such as unauthorized data exfiltration, persistence mechanisms, or arbitrary code execution.
能力评估
Purpose & Capability
The stated purpose, documentation, and script all align around manual Gmail OAuth setup for gog; the default gmail.modify scope is powerful but directly related to Gmail integration and is disclosed.
Instruction Scope
Instructions are user-directed and focused on Google Cloud OAuth setup, scope selection, generating an auth URL, and exchanging a user-provided code; no prompt injection, hidden role changes, or unrelated agent instructions were found.
Install Mechanism
The skill depends on the external gog CLI installed from a Homebrew tap and uses a local shell script; this is disclosed and purpose-aligned, but users must separately trust gog and their Google OAuth client setup.
Credentials
The script reads gog's local OAuth client credentials, contacts Google's official OAuth token endpoint, writes a temporary token import file, and imports it into gog; no unrelated local file access, alternate network destination, or exfiltration path was evident.
Persistence & Privilege
Persistent delegated Gmail access via a refresh token is expected for this OAuth setup, but recommending GOG_KEYRING_PASSWORD in .bashrc and briefly storing the refresh token in a temp file are credential-handling risks users should understand.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install gmail-oauth - 安装完成后，直接呼叫该 Skill 的名称或使用
/gmail-oauth触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - headless OAuth flow for Gmail API via gog CLI
元数据
常见问题
Gmail OAuth Setup 是什么？
Set up Gmail API access via gog CLI with manual OAuth flow. Use when setting up Gmail integration, renewing expired OAuth tokens, or troubleshooting Gmail authentication on headless servers. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 4825 次。
如何安装 Gmail OAuth Setup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install gmail-oauth」即可一键安装，无需额外配置。
Gmail OAuth Setup 是免费的吗？
是的，Gmail OAuth Setup 完全免费（开源免费），可自由下载、安装和使用。
Gmail OAuth Setup 支持哪些平台？
Gmail OAuth Setup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Gmail OAuth Setup？
由 kai-jar（@kai-jar）开发并维护，当前版本 v1.0.0。
推荐 Skills