360 Secure SkillHub
360 安全技能中心

Openclaw Email Orientation

面向 OpenClaw 代理的邮件与 Google 日历使用说明:区分代理邮箱与所有者邮箱,介绍 gog 认证流程与常用命令、日历写入权限设置步骤、凭证文件存放位置及常见故障排查;以解释和命令示例为主,不含实现代码。目录另含 DEPRECATED.md(内容未提供)。

netanel-abergel
netanel-abergel
热度 50.05
最近更新 2026-05-11 17:39:08
分类:知识依赖:代码执行 / 第三方 API / 读写文件应用场景:概念解释 / 邮件起草 / 日程安排 / 教学辅导

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add openclaw-email-orientation
Metadata
name
openclaw-email-orientation
description
Explain how email and Google Calendar work for OpenClaw agents, including the distinction between agent email and owner email, how gog and the Google Workspace skill are used, where related credentials/config live, and how to troubleshoot common setup or access issues. Use when someone asks how an OpenClaw agent accesses Gmail/Google Workspace/Calendar, where credentials are stored, how to use the agent inbox, how to give the agent write access to the owner's calendar, or how to guide another agent/user through the email or calendar setup model.

OpenClaw Email & Calendar Orientation

Minimum Model

Any model. This is an explanation and troubleshooting guide — no complex reasoning needed.


The Core Concept (Read This First)

There are two separate accounts:

Account
Owner The human's Google account (e.g. owner@company.com)
Agent The PA's own Google account (e.g. agent@agentdomain.com)

These are separate. Having an agent email does NOT automatically give access to the owner's email or calendar.

To access the owner's email/calendar:

  1. Owner must share access with the agent email (explicit step).
  2. Agent must authenticate using gog (explicit step).

If someone is confused → start with this distinction. It resolves most questions.


Key Paths and Files

File Purpose
~/.openclaw/.gog/credentials.json gog OAuth client credentials
~/.openclaw/agents/main/agent/auth-profiles.json OpenClaw auth profiles
~/.openclaw/workspace/skills/gog/SKILL.md gog usage reference

Security rule: Never show the contents of these files in chat. Mentioning the path is fine; printing the content is not.


Using gog

# One-time setup: load OAuth credentials
gog auth credentials /path/to/client_secret.json

# Add an account (opens browser for OAuth flow)
gog auth add owner@company.com --services gmail,calendar,drive,contacts,sheets,docs

# Verify the account was added
gog auth list

# Use the account in commands (always include GOG_ACCOUNT=...)
GOG_ACCOUNT=owner@company.com gog gmail search 'is:unread' --max 10

Common Commands

# Search email
GOG_ACCOUNT=owner@company.com gog gmail search 'newer_than:7d' --max 10

# Send email
GOG_ACCOUNT=owner@company.com gog gmail send \
  --to "recipient@example.com" \
  --subject "Hello" \
  --body "Message text"

# List calendar events in a time window
GOG_ACCOUNT=owner@company.com gog calendar events primary \
  --from "2026-04-01T09:00:00Z" \
  --to "2026-04-01T18:00:00Z"

# Create a calendar event
GOG_ACCOUNT=owner@company.com gog calendar create primary \
  --summary "Meeting" \
  --start "2026-04-02T10:00:00+00:00" \
  --end "2026-04-02T11:00:00+00:00"

Calendar Write Access — Step by Step

The most common issue: the agent can read the calendar but not create events.

Step 1 — Owner does this:

  1. Open calendar.google.com.
  2. Find the primary calendar → three-dot menu → Settings and sharing.
  3. Click "+ Add people" → enter the agent email.
  4. Set permission to "Make changes to events" (not "See all event details").
  5. Click Send.

Step 2 — Agent does this:

# Authenticate with calendar scope
gog auth add owner@company.com --services calendar

# Test write access by creating a test event
GOG_ACCOUNT=owner@company.com gog calendar create primary \
  --summary "Test Event" \
  --start "2026-04-02T10:00:00Z" \
  --end "2026-04-02T11:00:00Z"

If the test event appears in the owner's calendar → success.


Troubleshooting

Work through these checks in order:

  1. Clarify accounts: Is the question about agent email or owner email?
  2. Check gog is installed: Run which gog — if not found, check PATH.
  3. Check account was added: Run gog auth list — does owner's account appear?
  4. Check write scope: OAuth must include calendar write scope, not just read.
  5. Check keyring: If gog asks for a password, local keyring may need to be configured.
  6. Check GOG_ACCOUNT: All commands must include GOG_ACCOUNT=owner@company.com.
  7. Calendar write failures: Was permission set to "Make changes to events" (not "See details")?

If "Insufficient permissions" error: → Owner shared calendar with read-only access. Redo Step 1 with the correct permission level.

If "Token expired" error:

# Remove the expired account
gog auth remove owner@company.com

# Re-add it (will open browser for re-auth)
gog auth add owner@company.com --services gmail,calendar,drive,contacts

Response Style

  • Lead with the owner vs. agent distinction — this resolves most confusion.
  • Give commands first, explanation second.
  • When asked "where is X stored?" → give the path, do not print the file contents.
  • When asked for step-by-step → follow the Calendar Write Access section above.

Cost Tips

  • Very cheap: This skill is explanation only — minimal LLM tokens needed.
  • Small model OK: Any model can explain these concepts and provide commands.
  • Avoid: Do not re-explain the full orientation every time. Ask what specifically is confusing, then address only that.