gmail

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities match its Gmail purpose, but it relies on a third-party CLI and hosted integration with incomplete install provenance and opaque data handling. It is not clearly malicious, yet the combination of mailbox access, attachment handling, and autonomous email sending through an external vendor creates medium security risk.

Confidence: 81%Severity: 64%
Audit Metadata
Analyzed At
Mar 29, 2026, 06:00 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fgmail%2F@7b1807d95d774ab6a0f07d0c5cd15ab957d87205