Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add samttoo22-MewCat/OpenSoul --skill gmailgit clone --depth 1 https://github.com/samttoo22-MewCat/OpenSoulWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/samttoo22-mewcat/opensoul/gmail)<a href="https://agentmods.dev/skills/samttoo22-mewcat/opensoul/gmail"><img src="https://agentmods.dev/badge/skills/samttoo22-mewcat/opensoul/gmail.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00941 |
| Opus 5 | $0.00026 | $0.00470 |
| Sonnet 5 | $0.00010 | $0.00188 |
| Haiku 4.5 | $0.00005 | $0.00094 |
Grade A, and why
gmail scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Gmail Integration (OAuth2 API)
此技能允許透過 Google OAuth2 安全地存取 Gmail 帳戶,讀取信件並進行郵件操作。無需應用密碼,使用標準 OAuth2 流程。
核心功能
- OAuth2 認證:首次使用時彈出瀏覽器進行授權
- 信件檢索:查詢最近 3 天內的信件(已讀和未讀均獲取)
- 自動標記:讀取後自動標記為已讀
- 多語言支援:支援 UTF-8, Big5, GBK 等多種編碼
- 快取機制:自動快取最多 50 封信件到本地 JSON
- 默認限制:每次查詢返回最新 20 封郵件
使用方法
透過執行 scripts/gmail_controller.py 來操作。
1. 初始化並檢索信件
# 默認獲取最新 20 個郵件(已讀和未讀)
python scripts/gmail_controller.py --action fetch
# 或指定數量
python scripts/gmail_controller.py --action fetch --limit 10
輸出:
{
"status": "success",
"new_count": 5,
"cached_count": 20,
"newest": "2026-03-06T10:30:45",
"oldest": "2026-03-01T09:15:00",
"emails": [
{
"id": "msg_123",
"from": "[email protected]",
"subject": "郵件主旨",
"date": "Mon, 6 Mar 2026 10:30:45 +0000",
"preview": "前 500 字內容..."
}
]
}
2. 獲取快取統計
python scripts/gmail_controller.py --action stats
必要條件
- Google Cloud 專案 - 有效的 OAuth2 認證
- credentials.json - 保存到
workspace/credentials.json - 首次認證 - 執行
fetch時如無 token.json,會自動彈出瀏覽器授權
認證流程
首次執行:
1. 檢查 credentials.json
2. 若無 token.json,彈出瀏覽器
3. 用戶在 Google 登入頁授予「修改郵件」權限
4. Token 自動保存到 workspace/token.json
5. 後續執行自動使用 token(無需再授權)
Token 自動刷新:
- 當 token 過期時,系統自動使用 refresh_token 刷新
- 無需人工干預
設定檔
必要: workspace/credentials.json (來自 Google Cloud Console)
可選: .env
GMAIL_CHECK_INTERVAL_MINUTES=5 # Polling 間隔(若在 Dream Engine 中使用)
注意事項
- 權限:使用
gmail.modifyscope(讀取及標記信件) - 查詢範圍:固定查詢最近 3 天的信件(優化 API 配額)
- 快取限制:最多保留 50 封,新信自動插入開頭
- 字符編碼:自動偵測並支援多種編碼(UTF-8, Big5, GBK 等)
安全特性
- ✅ 使用 Google OAuth2(無密碼存儲)
- ✅ Token 自動加密保存
- ✅ 支援 Token 自動刷新
- ✅ 不支援刪除郵件(只能讀取和標記)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 100 lines · 51 tokens per session scan A bd5fdfaad095
gmail is a skill published in the GitHub repository samttoo22-MewCat/OpenSoul (19 stars, last pushed 5mo ago), licensed MIT. It adds 51 tokens to every session and 941 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Discord Integration
Send messages to Discord channels via webhook or bot.
api-and-namespace-design
API design conventions, namespace coordinate system, RBAC roles, ClawHub compatibility layer, OpenAPI contract sync rules, and CSRF/session handling.
backend-module-structure
Rules for the SkillHub backend Maven multi-module clean architecture. Ensures agents place new code in the correct module and respect dependency direction.
add-discord
Add Discord bot channel integration to ClaudeClaw.
add-gmail
Add Gmail integration to ClaudeClaw. Can be configured as a tool (agent reads/sends emails when triggered from WhatsApp) or as a full channel (emails can trigger the agent, schedule tasks, and receive replies). Guides through GCP OAuth setup and implements the integration.
add-telegram
Add Telegram as a channel. Can replace WhatsApp entirely or run alongside it. Also configurable as a control-only channel (triggers actions) or passive channel (receives notifications only).