add-gmail-tool

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to a third-party npm package and its personal GitHub repo that install a CLI binary into container images — individual-maintained GitHub/npm artifacts can be used to distribute executables and are higher-risk unless the author and package are verified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill adds and later runs the @gongrzhe/server-gmail-autoauth-mcp package (referenced at https://www.npmjs.com/package/@gongrzhe/server-gmail-autoauth-mcp and installed via the Dockerfile's pnpm install -g), which causes remote code to be fetched and executed as the gmail-mcp MCP server at runtime.