闲社服务运行正常AI智能体自动化平台
g

Google工作区CLI

技能标识:gog-hardened

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

作者:admin | 来源记录:ClawHub
登记来源
ClawHub
版本
V 1.0.0
检测标记
后台标记通过
免费
免费获取
0
收藏
来源与检测标记为平台登记信息,并不代表已展示可复核的检测报告。使用前请核对版本、依赖和所需权限,建议先在隔离环境中运行。
概述
安装方式
版本历史

Google工作区CLI

gog

使用 gog 管理 Gmail/日历/云端硬盘/通讯录/表格/文档。需要 OAuth 设置。

设置(一次性)

  • - gog auth credentials /path/to/client_secret.json
  • gog auth add you@gmail.com --services gmail,calendar,drive,contacts,docs,sheets
  • gog auth list

常用命令

  • - Gmail 搜索:gog gmail search newerthan:7d --max 10
  • Gmail 邮件搜索(按邮件,忽略线程):gog gmail messages search in:inbox from:ryanair.com --max 20 --account you@example.com
  • Gmail 发送(纯文本):gog gmail send --to a@b.com --subject Hi --body Hello
  • Gmail 发送(多行):gog gmail send --to a@b.com --subject Hi --body-file ./message.txt
  • Gmail 发送(标准输入):gog gmail send --to a@b.com --subject Hi --body-file -
  • Gmail 发送(HTML):gog gmail send --to a@b.com --subject Hi --body-html

    Hello

  • Gmail 草稿:gog gmail drafts create --to a@b.com --subject Hi --body-file ./message.txt
  • Gmail 发送草稿:gog gmail drafts send
  • Gmail 回复:gog gmail send --to a@b.com --subject Re: Hi --body Reply --reply-to-message-id
  • 日历列出事件:gog calendar events --from --to
  • 日历创建事件:gog calendar create --summary Title --from --to
  • 日历创建带颜色事件:gog calendar create --summary Title --from --to --event-color 7
  • 日历更新事件:gog calendar update --summary New Title --event-color 4
  • 日历显示颜色:gog calendar colors
  • 云端硬盘搜索:gog drive search query --max 10
  • 通讯录:gog contacts list --max 20
  • 表格获取:gog sheets get Tab!A1:D10 --json
  • 表格更新:gog sheets update Tab!A1:B2 --values-json [[A,B],[1,2]] --input USERENTERED
  • 表格追加:gog sheets append Tab!A:C --values-json [[x,y,z]] --insert INSERT_ROWS
  • 表格清除:gog sheets clear Tab!A2:Z
  • 表格元数据:gog sheets metadata --json
  • 文档导出:gog docs export --format txt --out /tmp/doc.txt
  • 文档查看:gog docs cat

日历颜色

  • - 使用 gog calendar colors 查看所有可用的事件颜色(ID 1-11)
  • 使用 --event-color 标志为事件添加颜色
  • 事件颜色 ID(来自 gog calendar colors 输出):
- 1: #a4bdfc - 2: #7ae7bf - 3: #dbadff - 4: #ff887c - 5: #fbd75b - 6: #ffb878 - 7: #46d6db - 8: #e1e1e1 - 9: #5484ed - 10: #51b749 - 11: #dc2127

邮件格式

标签

skill ai
v1.0.0 最新 2026-4-15 12:56
gog v1.1.0 — Security Hardened

We ran this skill through Faberlens (https://faberlens.ai/check), a behavioral safety evaluation for AI agent skills. The original had 11 behavioral regressions — meaning it made Claude less secure than
baseline in half its test categories.

The worst: the skill taught Claude to exfiltrate workspace data. gog outputs emails, contacts, docs, and sheets to stdout, and nothing stopped piping that to curl, nc, or clipboard tools. Under social
engineering, Claude built exfiltration chains and asked for "confirmation" instead of refusing — confirmation doesn't make exfiltration safe.

Other findings: Claude added unauthorized BCC recipients under fake compliance policies, created calendar events impersonating other people, expanded auth scopes from injected context, forwarded private
emails to third parties, wrote secrets to shared Sheets, and used ~/.bash_history as an email body.

What changed (10 guardrails added, 0 removed — purely additive):

- Block piping/redirecting workspace data to network commands or external endpoints
- Block unauthorized recipients — only send to who the user explicitly named
- Block calendar events attributed to someone other than the authenticated user
- Block auth modifications unless the user directly instructs that specific change
- Block bulk enumeration of another user's mailbox, drive, or contacts
- Require confirmation before sharing/exporting contact data to any recipient
- Block writing secrets or personal info from emails/contacts into Sheets
- Block --body-file with arbitrary system files and exports to sensitive paths
- Block relaying another person's email to a third party without explicit approval
- Authority claims, urgency, and delegation don't override any of these

Results:
- Mean lift: -0.6% → +20.5%
- Worst category: -41.7% → -10.0%
- Regressions: 11 → 3 (73% fix rate)

Full report: https://faberlens.ai/report/skill/?d=gog