gmail-automation
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Gmail capabilities are broadly aligned with the stated purpose and there is no obvious malware pattern or remote installer chain, but provenance is weak and the undocumented token-refresh wording creates data-flow uncertainty. Overall this looks like a plausible Gmail automation skill with medium security risk due to community-source trust and its ability to send/modify email on the user's behalf.
Confidence: 79%Severity: 52%
Audit Metadata