gmcli
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Gmail threads and searches which may contain malicious instructions.
- Ingestion points:
gmcli searchandgmcli threadcommands inSKILL.mdingest external email content into the agent's context. - Boundary markers: None present to delimit untrusted email content from agent instructions.
- Capability inventory: The skill possesses the capability to send emails and list drafts via
gmcli sendandgmcli drafts listcommands. - Sanitization: No specific sanitization or filtering of email body content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a global NPM package from the author's registry.
- Evidence:
npm install -g @mariozechner/gmcliinSKILL.md.
Audit Metadata