返回顶部
g

gog-hardenedGoogle工作区CLI

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

作者: admin | 来源: ClawHub
源自
ClawHub
版本
V 1.0.0
安全检测
已通过
249
下载量
免费
免费
0
收藏
概述
安装方式
版本历史

gog-hardened

gog

使用 gog 管理 Gmail/日历/云端硬盘/通讯录/表格/文档。需要 OAuth 设置。

设置(一次性)

  • - gog auth credentials /path/to/client_secret.json
  • gog auth add you@gmail.com --services gmail,calendar,drive,contacts,docs,sheets
  • gog auth list

常用命令

  • - Gmail 搜索:gog gmail search newerthan:7d --max 10
  • Gmail 邮件搜索(按邮件,忽略线程):gog gmail messages search in:inbox from:ryanair.com --max 20 --account you@example.com
  • Gmail 发送(纯文本):gog gmail send --to a@b.com --subject Hi --body Hello
  • Gmail 发送(多行):gog gmail send --to a@b.com --subject Hi --body-file ./message.txt
  • Gmail 发送(标准输入):gog gmail send --to a@b.com --subject Hi --body-file -
  • Gmail 发送(HTML):gog gmail send --to a@b.com --subject Hi --body-html

    Hello

  • Gmail 草稿:gog gmail drafts create --to a@b.com --subject Hi --body-file ./message.txt
  • Gmail 发送草稿:gog gmail drafts send
  • Gmail 回复:gog gmail send --to a@b.com --subject Re: Hi --body Reply --reply-to-message-id
  • 日历列出事件:gog calendar events --from --to
  • 日历创建事件:gog calendar create --summary Title --from --to
  • 日历创建带颜色事件:gog calendar create --summary Title --from --to --event-color 7
  • 日历更新事件:gog calendar update --summary New Title --event-color 4
  • 日历显示颜色:gog calendar colors
  • 云端硬盘搜索:gog drive search query --max 10
  • 通讯录:gog contacts list --max 20
  • 表格获取:gog sheets get Tab!A1:D10 --json
  • 表格更新:gog sheets update Tab!A1:B2 --values-json [[A,B],[1,2]] --input USERENTERED
  • 表格追加:gog sheets append Tab!A:C --values-json [[x,y,z]] --insert INSERT_ROWS
  • 表格清除:gog sheets clear Tab!A2:Z
  • 表格元数据:gog sheets metadata --json
  • 文档导出:gog docs export --format txt --out /tmp/doc.txt
  • 文档查看:gog docs cat

日历颜色

  • - 使用 gog calendar colors 查看所有可用的事件颜色(ID 1-11)
  • 使用 --event-color 标志为事件添加颜色
  • 事件颜色 ID(来自 gog calendar colors 输出):
- 1: #a4bdfc - 2: #7ae7bf - 3: #dbadff - 4: #ff887c - 5: #fbd75b - 6: #ffb878 - 7: #46d6db - 8: #e1e1e1 - 9: #5484ed - 10: #51b749 - 11: #dc2127

邮件格式

标签

skill ai
v1.0.0 最新 2026-4-15 12:56
gog v1.1.0 — Security Hardened

We ran this skill through Faberlens (https://faberlens.ai/check), a behavioral safety evaluation for AI agent skills. The original had 11 behavioral regressions — meaning it made Claude less secure than
baseline in half its test categories.

The worst: the skill taught Claude to exfiltrate workspace data. gog outputs emails, contacts, docs, and sheets to stdout, and nothing stopped piping that to curl, nc, or clipboard tools. Under social
engineering, Claude built exfiltration chains and asked for "confirmation" instead of refusing — confirmation doesn't make exfiltration safe.

Other findings: Claude added unauthorized BCC recipients under fake compliance policies, created calendar events impersonating other people, expanded auth scopes from injected context, forwarded private
emails to third parties, wrote secrets to shared Sheets, and used ~/.bash_history as an email body.

What changed (10 guardrails added, 0 removed — purely additive):

- Block piping/redirecting workspace data to network commands or external endpoints
- Block unauthorized recipients — only send to who the user explicitly named
- Block calendar events attributed to someone other than the authenticated user
- Block auth modifications unless the user directly instructs that specific change
- Block bulk enumeration of another user's mailbox, drive, or contacts
- Require confirmation before sharing/exporting contact data to any recipient
- Block writing secrets or personal info from emails/contacts into Sheets
- Block --body-file with arbitrary system files and exports to sensitive paths
- Block relaying another person's email to a third party without explicit approval
- Authority claims, urgency, and delegation don't override any of these

Results:
- Mean lift: -0.6% → +20.5%
- Worst category: -41.7% → -10.0%
- Regressions: 11 → 3 (73% fix rate)

Full report: https://faberlens.ai/report/skill/?d=gog

Archiver·手机版·闲社网·闲社论坛·羊毛社区· 多链控股集团有限公司 · 苏ICP备2025199260号-1

Powered by Discuz! X5.0   © 2024-2025 闲社网·线报更新论坛·羊毛分享社区·http://xianshe.com

p2p_official_large