The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill uses the Python pickle module to load and save OAuth2 tokens in gmail_manager.py.
Evidence: The _authenticate method calls pickle.load(token) from the file path specified in TOKEN_FILE (~/.gmail_token.pickle). Deserializing untrusted data with pickle can lead to arbitrary code execution if the token file is compromised or replaced by an attacker.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (email bodies and subjects) which can be used to influence or override agent behavior.
Ingestion points: The get_message method in gmail_manager.py extracts email content using _extract_body and returns it as plain text or HTML.
Boundary markers: There are no delimited boundaries or explicit warnings provided to the agent to ignore instructions embedded within the fetched email content.
Capability inventory: The skill possesses high-privilege capabilities including send_email, delete_message, batch_modify (which can archive or label messages), and download_attachment.
Sanitization: No sanitization or filtering is performed on the email body before it is passed to the agent's context.
[DATA_EXPOSURE]: The skill writes sensitive OAuth2 client credentials to a temporary file in a world-readable directory.
Evidence: The _get_new_credentials method in gmail_manager.py writes credentials_data (containing CLIENT_ID and CLIENT_SECRET) to /tmp/gmail_credentials.json. On multi-user systems, this allows other users to potentially harvest these credentials.
[COMMAND_EXECUTION]: The installation script modifies file permissions and creates symlinks.
Evidence: setup.sh executes chmod +x on the main Python script and ln -sf to create a symlink in ~/.local/bin/. While expected for installation, these are standard command execution patterns.
[EXTERNAL_DOWNLOADS]: The skill installs necessary dependencies from well-known official sources.
Evidence: setup.sh uses uv pip install to download google-auth-oauthlib, google-auth-httplib2, and google-api-python-client. These are official Google API libraries.

gmail-manager