skills/jarvusinnovations/claude-assist/assist-gmail/Socket

assist-gmail

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated Gmail-management purpose is coherent, but the skill depends on a non-verifiable bundled CLI and a localhost proxy server with incomplete visibility into credential handling and upstream data flows. This is not confirmed malware, but it carries medium risk due to opaque execution and server-mediated access to sensitive email data.

Confidence: 81%Severity: 56%

Audit Metadata

Analyzed At

Jun 29, 2026, 07:23 PM

Package URL

pkg:socket/skills-sh/JarvusInnovations%2Fclaude-assist%2Fassist-gmail%2F@137e00ee3fa9c77a79a94d591c7cdf349db3a202d715ed4c7435295131566e5b