Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Gmail Send Skill Security Audit

What the author says it does (original text)

Gmail: Send an email.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Attachments can transmit local file contents to external recipients

Source references: 5
What we found

The command can attach one or more files and send them immediately through Gmail. If the agent selects the wrong file or recipient, or the attachment contains sensitive information, that content leaves the user’s environment.

Why this matters

Reports, spreadsheets, personal information, business data, or credentials within them could be disclosed to To, CC, or BCC recipients.

The skill is expressly for sending email, and its active options allow one or more local files to be attached, up to 25MB total. If executed with the wrong attachment or recipient, file contents would be sent to an external mailbox. The documented confirmation requirement reduces this risk, but it does not say that confirmation must show attachment paths, recipients, or sensitivity checks. The user can require a full preview or use `--draft`/`--dry-run` first.

SKILL.md:34In the instructionsOpen original file
| `--from` | — | — | Sender address (for send-as/alias; omit to use account default) || `--attach` | — | — | Attach a file (can be specified multiple times) || `--cc` | — | — | CC email address(es), comma-separated || `--bcc` | — | — | BCC email address(es), comma-separated || `--html` | — | — | Treat --body as HTML content (default is plain text) |
Show 4 other places
SKILL.md:48In the instructionsOpen original file
gws gmail +send --to alice@example.com --subject 'Hello' --body 'Hi!' --from alias@example.comgws gmail +send --to alice@example.com --subject 'Report' --body 'See attached' -a report.pdfgws gmail +send --to alice@example.com --subject 'Files' --body 'Two files' -a a.pdf -a b.csvgws gmail +send --to alice@example.com --subject 'Hello' --body 'Hi!' --draft
SKILL.md:57In the instructionsOpen original file
- Use --from to send from a configured send-as alias instead of your primary address.- Use -a/--attach to add file attachments. Can be specified multiple times. Total size limit: 25MB.- With --html, use fragment tags (<p>, <b>, <a>, <br>, etc.) — no <html>/<body> wrapper needed.
SKILL.md:18In the instructionsOpen original file
Send an email
SKILL.md:61In the instructionsOpen original file
> [!CAUTION]> This is a **write** command — confirm with the user before executing.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

Sender aliases and BCC can obscure identity or recipient scope

Source references: 4
What we found

The caller can select a configured send-as alias and add BCC addresses hidden from other recipients. If confirmation does not show the effective identity and complete recipient list, the user may approve a message whose apparent distribution differs from the actual send.

Why this matters

A message could be sent under the wrong personal or organizational identity, or business correspondence could be silently copied to an unintended third party, creating reputational, compliance, or contractual risk.

Active options permit a configured sender alias and BCC recipients hidden from other recipients. If confirmation does not clearly show the effective sender identity and complete recipient list, the user could misunderstand who the message represents or who receives it. The alias is limited to configured addresses and confirmation is required, but the documentation does not define what must be shown. The user can require an explicit From/To/CC/BCC preview and use a draft or dry run first.

SKILL.md:33In the instructionsOpen original file
| `--body` | ✓ | — | Email body (plain text, or HTML with --html) || `--from` | — | — | Sender address (for send-as/alias; omit to use account default) || `--attach` | — | — | Attach a file (can be specified multiple times) || `--cc` | — | — | CC email address(es), comma-separated || `--bcc` | — | — | BCC email address(es), comma-separated || `--html` | — | — | Treat --body as HTML content (default is plain text) |
Show 3 other places
SKILL.md:56In the instructionsOpen original file
- Handles RFC 5322 formatting, MIME encoding, and base64 automatically.- Use --from to send from a configured send-as alias instead of your primary address.- Use -a/--attach to add file attachments. Can be specified multiple times. Total size limit: 25MB.
SKILL.md:61In the instructionsOpen original file
> [!CAUTION]> This is a **write** command — confirm with the user before executing.
SKILL.md:36In the instructionsOpen original file
| `--cc` | — | — | CC email address(es), comma-separated || `--bcc` | — | — | BCC email address(es), comma-separated || `--html` | — | — | Treat --body as HTML content (default is plain text) |

Inside this skill

5 instruction sections

The Skill’s core behavior is to send a Gmail message immediately through the `gws` command; recipient, subject, and body are required.

View source
SKILL.md:18In the instructionsOpen original file
Send an email## Usage```bashgws gmail +send --to <EMAILS> --subject <SUBJECT> --body <TEXT>```

It supports attachments, CC, BCC, HTML bodies, and sender aliases, and can instead create a draft or preview the request.

View source
SKILL.md:33In the instructionsOpen original file
| `--body` | ✓ | — | Email body (plain text, or HTML with --html) || `--from` | — | — | Sender address (for send-as/alias; omit to use account default) || `--attach` | — | — | Attach a file (can be specified multiple times) || `--cc` | — | — | CC email address(es), comma-separated || `--bcc` | — | — | BCC email address(es), comma-separated || `--html` | — | — | Treat --body as HTML content (default is plain text) || `--dry-run` | — | — | Show the request that would be sent without executing it || `--draft` | — | — | Save as draft instead of sending |

The documentation explicitly classifies sending as a write operation and requires user confirmation before execution.

View source
SKILL.md:61In the instructionsOpen original file
> [!CAUTION]> This is a **write** command — confirm with the user before executing.

Authentication, global flags, and security rules are delegated to an adjacent Skill that is not included in this source, so the substance of those controls cannot be verified from the provided material.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
SKILL.md:66In the instructionsOpen original file
- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth- [gws-gmail](../gws-gmail/SKILL.md) — All send, read, and manage email commands
Start here · InstructionsSKILL.md
gws-gmail-send
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws gmail +send --to <EMAILS> --subject <SUBJECT> --body <TEXT>
SKILL.md:43In the instructionsOpen original file
```bashgws gmail +send --to alice@example.com --subject 'Hello' --body 'Hi Alice!'
Lines read
68
File checksum (to compare versions)
f195447e231435a57b9c52fe8617ba01009c2f27482385a23c5e01f0a8ed4fb5