XferOps gog

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

This skill appears to do what it says: it wraps the gog CLI to access Google Workspace APIs. Before installing: 1) Verify the Homebrew tap/formula (steipete/tap/gogcli) and the binary’s upstream (check the project's homepage or source repo) to avoid installing a trojanized binary. 2) Keep OAuth client_secret.json and any generated tokens secure; prefer using the file keyring option instead of embedding GOG_KEYRING_PASSWORD in global profiles or systemd files. 3) Limit OAuth scopes to least privilege for the account you add. 4) When scripting, use --no-input and --json but be careful about automating email sends—confirm actions that send messages or modify calendars. If you want higher assurance, inspect the Homebrew formula and the gog project source (or verify its release binaries/signatures) before installing.

Type: OpenClaw Skill Name: xferops-gog Version: 0.1.1 The skill bundle provides instructions for installing and using the `gog` command-line tool, a legitimate utility for interacting with Google Workspace services. All commands and setup instructions described in `SKILL.md` are aligned with the stated purpose of managing Gmail, Calendar, Drive, Contacts, Sheets, and Docs. There is no evidence of intentional harmful behavior, such as data exfiltration to unauthorized endpoints, backdoor installation, or prompt injection designed to manipulate the agent into malicious actions. The installation method uses `brew` from a specified formula, which is a standard package manager approach. While the `gog` tool itself has powerful capabilities (e.g., sending emails, saving attachments), the skill bundle merely documents these legitimate functions without directing them towards malicious ends.