gmail

Fail

Audited by Socket on May 14, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The skill's Gmail purpose matches its capabilities, but its actual data flow is a full third-party proxy model. Mailbox contents, send actions, and OAuth-backed access are mediated by Maton rather than direct Google APIs, which is disproportionate for a basic Gmail integration and creates significant privacy/integrity risk despite no malicious installer behavior.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
May 14, 2026, 12:15 AM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Fgmail%2F@c30ec886078aa326a470dd051123b116619a99b2
Security Audit — socket — gmail