Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Gmail Skill Security Audit

What the author says it does (original text)

Gmail: Send, read, and manage email.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A missing shared dependency triggers a generator that creates new Skill files

Source references: 1
What we found

The prerequisite explicitly directs the agent to run `gws generate-skills` when the shared Skill is missing. This goes beyond reading existing Gmail instructions and makes persistent local files; neither the generator implementation nor its generated content is provided for review.

Why this matters

If the shared file is absent and the instruction is followed, the user's Skill directory will change, and the agent may then follow authentication and security rules that were not covered by this audit. The evidence does not establish what other files the generator changes or that its output is malicious.

This is an active but conditional instruction: if the shared Skill is missing, the agent is told to run `gws generate-skills`. The text says this creates at least the referenced shared Skill, so it may persist files locally. The generator implementation, output locations, and generated content are not provided, so the exact changes or maliciousness cannot be established; a user can ask the author to document the outputs or restrict write access for this command.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

3 instruction sections

This Skill is an index for a Gmail command-line interface. It lists helper Skills for sending, replying, forwarding, reading, and watching mail, and exposes Gmail API resources including messages, drafts, labels, settings, and threads. The referenced helper Skills are not included, so their recipient checks, confirmation flow, and data handling cannot be assessed from this evidence.

View source
SKILL.md:26In the instructionsOpen original file
|---------|-------------|| [`+send`](../gws-gmail-send/SKILL.md) | Send an email || [`+triage`](../gws-gmail-triage/SKILL.md) | Show unread inbox summary (sender, subject, date) || [`+reply`](../gws-gmail-reply/SKILL.md) | Reply to a message (handles threading automatically) || [`+reply-all`](../gws-gmail-reply-all/SKILL.md) | Reply-all to a message (handles threading automatically) || [`+forward`](../gws-gmail-forward/SKILL.md) | Forward a message to new recipients || [`+read`](../gws-gmail-read/SKILL.md) | Read a message and extract its body or headers || [`+watch`](../gws-gmail-watch/SKILL.md) | Watch for new emails and stream them as NDJSON |
SKILL.md:41In the instructionsOpen original file
  - `watch` — Set up or update a push notification watch on the given user mailbox.  - `drafts` — Operations on the 'drafts' resource  - `history` — Operations on the 'history' resource  - `labels` — Operations on the 'labels' resource  - `messages` — Operations on the 'messages' resource  - `settings` — Operations on the 'settings' resource  - `threads` — Operations on the 'threads' resource

Before invoking a Gmail API method, the Skill requires inspecting command help and the method schema, then constructing parameters from that output. These are inspection commands; the shown lines do not themselves direct the agent to send mail or modify the mailbox.

View source
SKILL.md:50In the instructionsOpen original file
Before calling any API method, inspect it:```bash# Browse resources and methodsgws gmail --help# Inspect a method's required params, types, and defaultsgws schema gmail.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.
Start here · InstructionsSKILL.md
gws-gmail
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws gmail <resource> <method> [flags]
SKILL.md:52In the instructionsOpen original file
```bash# Browse resources and methods
Lines read
62
File checksum (to compare versions)
b9554b8e2c32d17357ecacbf952a12e17def48f4ca17c6b552f22f4a8efc5513