gmail-automation

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Gmail capabilities are broadly aligned with the stated purpose and there is no obvious malware pattern or remote installer chain, but provenance is weak and the undocumented token-refresh wording creates data-flow uncertainty. Overall this looks like a plausible Gmail automation skill with medium security risk due to community-source trust and its ability to send/modify email on the user's behalf.

Confidence: 79%Severity: 52%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:37 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fgmail-automation%2F@521ecd969edbcb9e277a595f0d794f9c5d795a4e5aceac07ee5d2853ac62067e
Security Audit — socket — gmail-automation