← 返回 Skills 市场
118
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install lukaizj-gmail
功能描述
Gmail integration - Send emails, manage labels, and automate Gmail workflows with full OAuth2 support
使用说明 (SKILL.md)
Gmail Integration
Gmail integration skill for OpenClaw. Send emails, manage labels, and automate Gmail workflows.
Capabilities
- Send emails via Gmail API
- List recent emails from inbox
- Create and manage custom labels
- Full OAuth2 support for secure authentication
Setup
- Go to Google Cloud Console (https://console.cloud.google.com/)
- Create a new project or select existing
- Enable Gmail API from API Library
- Create OAuth 2.0 credentials:
- Go to "Credentials" → "Create Credentials" → "OAuth client ID"
- Application type: "Desktop app"
- Download the JSON and get client_id and client_secret
- Configure environment variables
Environment Variables
| Variable | Required | Description |
|---|---|---|
GMAIL_CLIENT_ID |
Yes | OAuth Client ID from Google Cloud |
GMAIL_CLIENT_SECRET |
Yes | OAuth Client Secret |
Usage Examples
Send an email to [email protected] with subject "Project Update" and body "The project is complete"
List my recent emails from Gmail
Create a new label named "Projects/OpenClaw"
Message Types
- Plain text emails
- HTML emails (coming soon)
- Emails with attachments (coming soon)
Rate Limits
Google Gmail API has rate limits:
- 100:00 requests per day
- 100 requests per second
Troubleshooting
- "Invalid credentials": Re-check your OAuth credentials
- "Rate limit exceeded": Wait before making more requests
- "Account not verified": Your app needs to go through Google's verification for sensitive scopes
安全使用建议
This skill claims 'full OAuth2 support' but the code does not perform the OAuth token exchange or include Authorization headers, and it uses an incorrect API path — in short, it won't work as advertised. Before installing: (1) review or request fixes to the code so it implements the OAuth2 flow (authorization code or device flow), exchanges client_id/secret for tokens, and sends 'Authorization: Bearer <access_token>' with requests; (2) test with a throwaway Google account / limited-scope credentials, not your primary account; (3) avoid pasting production client_secret into untrusted skills — if you must provide secrets, ensure you understand where tokens are stored and whether the skill transmits them elsewhere; (4) ask the author to correct endpoint URLs and document token storage/refresh behavior. Because the pieces don't line up, treat this skill as non-functional and review or fix the implementation before giving it real credentials.
功能分析
Type: OpenClaw Skill
Name: lukaizj-gmail
Version: 0.1.0
The Gmail integration skill provides standard functionality for sending emails, listing messages, and managing labels via the Google Gmail API. While the implementation in `gmail.py` is currently non-functional because it lacks the logic to generate and include OAuth2 authorization headers in its requests, there is no evidence of malicious intent, data exfiltration, or prompt injection. The code strictly communicates with official Google API endpoints (gmail.googleapis.com).
能力标签
能力评估
Purpose & Capability
The name/description and required env vars (GMAIL_CLIENT_ID, GMAIL_CLIENT_SECRET) match a Gmail integration. However, the code never implements an OAuth2 token exchange or attaches Authorization headers to Gmail API calls. The code also uses an incorrect endpoint string (e.g., '.../messages.send' instead of the expected '/messages/send' path), so it cannot actually call Gmail on behalf of a user. Claiming 'Full OAuth2 support' in SKILL.md is inconsistent with the code.
Instruction Scope
SKILL.md instructs you to create OAuth credentials and set env vars, but does not explain how the skill obtains or stores access/refresh tokens, nor how to complete the OAuth consent/redirect flow. The runtime instructions and code do not direct the agent to perform an OAuth handshake or to prompt the user for an authorization code, so runtime behavior will either fail or require ad-hoc manual steps. The instructions are therefore incomplete and grant the agent ambiguous discretion to attempt network calls without proper auth.
Install Mechanism
No install spec or external downloads are included; the skill is instruction-only with a single Python file. That minimizes install-time risk (nothing is fetched or extracted).
Credentials
Requesting GMAIL_CLIENT_ID and GMAIL_CLIENT_SECRET is reasonable for an app that performs OAuth. However, those two values alone are insufficient for API access — the code should obtain and use access tokens. There are no other environment variables or unrelated credentials requested, so the scope of requested secrets is narrow but currently misapplied.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration or modify other skills. It does read environment variables at module import, which is normal for credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install lukaizj-gmail - 安装完成后，直接呼叫该 Skill 的名称或使用
/lukaizj-gmail触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of Gmail Integration skill.
- Send emails via the Gmail API.
- List recent emails from your inbox.
- Create and manage custom labels.
- Full OAuth2 support for secure authentication.
- Requires environment variables: GMAIL_CLIENT_ID and GMAIL_CLIENT_SECRET.
元数据
常见问题
Gmail Integration 是什么？
Gmail integration - Send emails, manage labels, and automate Gmail workflows with full OAuth2 support. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 118 次。
如何安装 Gmail Integration？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install lukaizj-gmail」即可一键安装，无需额外配置。
Gmail Integration 是免费的吗？
是的，Gmail Integration 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Gmail Integration 支持哪些平台？
Gmail Integration 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Gmail Integration？
由 lukaizj（@lukaizj）开发并维护，当前版本 v0.1.0。
推荐 Skills