Agent Economy ReportAgent Economy ReportCAUTION version 1.0.0 · audited 2026-09-17
This package is documentation for using an external command-line tool called gog with Google Workspace. It tells an agent to install gog through a Homebrew tap, set up OAuth credentials, and run commands that can read and modify Gmail, Calendar, Drive, Contacts, Sheets, and Docs. The package itself contains no executable code, hidden network destinations, or obfuscation. However, it would give an agent broad Google account access and the ability to send email or change and clear data, and it depends on a third-party binary not included here. It includes a written warning to confirm before some write actions, which is helpful but not a technical control. A careful user should review the OAuth scopes and the gog binary before installation.
| Declared purpose | Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs. |
| Observed behavior | The skill files define an agent-facing guide and install metadata for the gog CLI. The guide instructs OAuth setup with a client_secret.json, adding a Google account with Gmail, Calendar, Drive, Contacts, Sheets, and Docs services, and running shell commands to search and send Gmail, list calendar events, search Drive, read and modify Sheets, and export or read Docs. The package also warns to confirm before sending mail or creating events. No executable code from the skill itself performs these actions; the actions are delegated to the external gog binary. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| network | needed | The documented gog commands access Google Workspace services over the network, and the docs link to https://gogcli.sh in SKILL.md line 4. |
| shell | needed | The skill output type is described as shell commands in skill-card.md line 40, and the guide contains command lines to run, such as SKILL.md line 18. |
| filesystem_read | needed | OAuth setup reads a local client_secret.json file supplied by the user in SKILL.md line 13. |
| filesystem_write | needed | Docs export can write exported content to a local file such as /tmp/doc.txt in SKILL.md line 28. |
| credentials | needed | The skill requires an OAuth client secret and an authorized Google account through gog auth commands in SKILL.md lines 13-14. |
| install_packages | needed | The install metadata instructs Homebrew to install gog from steipete/tap/gogcli in SKILL.md line 5. |
| severity | finding |
|---|---|
| medium | Third-party binary installed from Homebrew tap The package does not contain the gog executable; it tells the platform to install it from steipete/tap/gogcli. That binary would receive the OAuth credentials and could perform additional actions not visible in these files. SKILL.md:5 metadata: {"clawdbot":{"emoji":"🎮","requires":{"bins":["gog"]},"install":[{"id":"brew","kind":"brew","formula":"steipete/tap/gogcli","bins":["gog"],"label":"Ins |
| low | OAuth client secret read from local filesystem The setup command reads a user-provided client_secret.json file. This is a credential file used to identify the application to Google. SKILL.md:13 - `gog auth credentials /path/to/client_secret.json` |
| medium | Broad Google Workspace scopes authorized The command authorizes an account for Gmail, Calendar, Drive, Contacts, Sheets, and Docs, giving the gog CLI broad read/write access across those services. SKILL.md:14 - `gog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docs` |
| medium | Can send email from the authenticated Gmail account The skill documents a gog gmail send command that sends email. An agent with this skill could send messages as the authenticated user. SKILL.md:19 - Gmail send: `gog gmail send --to a@b.com --subject "Hi" --body "Hello"` |
| medium | Can change or clear Google Workspace content The package itself acknowledges that commands can send email, create calendar events, or change and clear Sheets or Drive content. skill-card.md:28 Risk: Commands can send email, create calendar events, or change and clear Sheets or Drive content. |
| medium | Can clear Sheets cells The gog sheets clear command removes values from a specified range in a Google Sheet. SKILL.md:26 - Sheets clear: `gog sheets clear <sheetId> "Tab!A2:Z"` |
| low | Can write exported Docs to local filesystem The gog docs export command writes a document export to a local path such as /tmp/doc.txt. SKILL.md:28 - Docs export: `gog docs export <docId> --format txt --out /tmp/doc.txt` |
| info | Confirmation instruction present The skill tells the agent to confirm before sending mail or creating events. This is a written safety instruction, not a technical control. SKILL.md:36 - Confirm before sending mail or creating events. |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| gogcli.sh | not in the service index | SKILL.md:4 |
| Binaries invoked | none |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 4 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 36 | 00c1af6cde012997… |
_meta.json | 6 | cc6641f746e2ad63… |
skill-card.md | 54 | b26493c7a5001537… |
For agents
JSON: https://agenteconomy.report/k/gog.audit.json · badge: https://agenteconomy.report/k/gog.audited.svg ·
skill rating: /k/gog · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).