gmail-cleaner
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The scripts automatically install required dependencies from the official Python Package Index (PyPI). The libraries targeted are official Google API clients and authentication modules.
- [COMMAND_EXECUTION]: The skill uses shell commands to invoke the Python package manager for automated dependency setup. These commands are hardcoded to install specific, trusted libraries.
- [DYNAMIC_EXECUTION]: The application employs the pickle module to store and retrieve OAuth authentication tokens locally. While this module is sensitive to untrusted data, in this context it is used strictly for internal state persistence of the session tokens it generates.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of Gmail message headers (specifically sender addresses) to generate statistics and identify cleanup targets. While this presents a minor theoretical attack surface for indirect prompt injection, the data is currently used for counting and filtering purposes rather than instruction execution.
Audit Metadata