Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Gmail Read Skill Security Audit

What the author says it does (original text)

Gmail: Read a message and extract its body or headers.

Independent security check

No obvious risks found in this check

Files checked
1
Risks found
0
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill's stated operation is to read one Gmail message selected by a user-supplied message ID; the provided material does not instruct it to send, delete, or modify email.

View source
SKILL.md:18In the instructionsOpen original file
Read a message and extract its body or headers
SKILL.md:22In the instructionsOpen original file
```bashgws gmail +read --id <ID>```
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--id` | ✓ | — | The Gmail message ID to read || `--headers` | — | — | Include headers (From, To, Subject, Date) in the output |

The user can optionally include sender, recipient, subject, and date headers or return the HTML body. These outputs may contain private or sensitive information, so the command should only be used for messages the user is authorized to view.

View source
SKILL.md:31In the instructionsOpen original file
| `--id` | ✓ | — | The Gmail message ID to read || `--headers` | — | — | Include headers (From, To, Subject, Date) in the output || `--format` | — | text | Output format (text, json) || `--html` | — | — | Return HTML body instead of plain text || `--dry-run` | — | — | Show the request that would be sent without executing it |

The Skill relies on the external `gws` program and a separate shared Skill for authentication and security rules; if that shared Skill is absent, it recommends running a generation command. The supplied material does not contain enough implementation to audit the authentication flow or generator behavior.

View source
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws gmail +read --help"---
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

The command provides `--dry-run` to display the proposed request without executing it, allowing the access target to be checked first.

View source
SKILL.md:34In the instructionsOpen original file
| `--html` | — | — | Return HTML body instead of plain text || `--dry-run` | — | — | Show the request that would be sent without executing it |
Start here · InstructionsSKILL.md
gws-gmail-read
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws gmail +read --id <ID>
SKILL.md:38In the instructionsOpen original file
```bashgws gmail +read --id 18f1a2b3c4d
Lines read
53
File checksum (to compare versions)
7dd3b5648ec4a296fce54cd32490c39f2f1d7fc183b0ce13d17196928a1d9886