email-triage

SUSPICIOUS: the stated purpose and mailbox actions are coherent and tightly scoped, but the skill leaves its most sensitive dependency—the Gmail MCP server or CLI—unspecified. Without a pinned official Google interface, the installing repo could route Gmail auth and message data through third-party code, creating medium trust and data-flow risk despite otherwise strong safety boundaries.