gmail

SUSPICIOUS: the Gmail functionality is coherent with the stated purpose, and most instructions are well-scoped for mailbox management. The main risk is trust: all account access and OAuth handling flow through an unverifiable local CLI, which is disproportionate because that binary receives mailbox data and likely tokens/scopes without independently verifiable provenance. No confirmed credential exfiltration or malicious data routing is shown, but the black-box dependency makes this a high-risk skill.