gmail-read

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The read-only Gmail behavior is proportionate and the prompt-injection guidance is strong, but the core `gmail` executable is an undocumented external dependency with no verifiable source or installation path. The skill’s purpose is coherent, yet install trust and endpoint transparency are insufficient for a benign classification.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Sep 24, 2026, 09:11 PM
Package URL
pkg:socket/skills-sh/hec-ovi%2Fgmail-skill%2Fgmail-read%2F@93d7b95031ed77eb6c4912a185be0c1a18f055e9ad7f0cdb5af31e5300fdc0fe