gmail-read
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The read-only Gmail behavior is proportionate and the prompt-injection guidance is strong, but the core `gmail` executable is an undocumented external dependency with no verifiable source or installation path. The skill’s purpose is coherent, yet install trust and endpoint transparency are insufficient for a benign classification.
Confidence: 88%Severity: 78%
Audit Metadata