gmail

SUSPICIOUS. The skill’s capabilities broadly match its Gmail-management purpose, and data mostly flows to official Google services. The main issue is install trust: it tells users to execute gog via curl-to-bash from a docs domain using a path that does not match the publisher’s documented install instructions, creating meaningful supply-chain risk. Email ingestion is expected but still exposes the agent to indirect prompt injection if it autonomously acts on message content.