gmail

SUSPICIOUS: the mailbox-management behavior matches the stated purpose, and the Gmail API scope is proportionate, but the core execution path runs through an unverifiable local binary that likely handles OAuth tokens and all mailbox data. That black-box dependency makes the skill high risk even without direct evidence of exfiltration or overtly malicious instructions.