Skip to content
skillsafebeta
← Report library
Purpose / Other

Recipe Forward Labeled Emails Skill Security Audit

What the author says it does (original text)

Find Gmail messages with a specific label and forward them to another address.

Independent security check

Do not install or run it yet

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
High risk

Message bodies are sent to a hard-coded recipient

Source references: 4
What we found

The workflow reads matching messages in full and directs the original body to `manager@company.com` in a new email. The user does not select this address at execution time, and the steps require no per-message preview, recipient confirmation, or sensitive-content restriction.

Why this matters

Confidential, personal, or regulated content in messages labeled `needs-review` could be disclosed to an address the user did not authorize or that is outside their organization.

What this evidence establishes

The active steps do read matching messages and send the original body to `manager@company.com`, so literal execution would disclose that content outside the mailbox. However, forwarding is the skill’s stated purpose, and the same command contains template placeholders such as `[Original Subject]` and `[Original Message Body]`. The source does not establish whether the address is another example to replace or a fixed recipient used without user selection. The actual address and message scope should be explicitly confirmed by the user before sending.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:24In the instructionsOpen original file
1. Find labeled messages: `gws gmail users messages list --params '{"userId": "me", "q": "label:needs-review"}' --format table`2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`3. Forward via new email: `gws gmail +send --to manager@company.com --subject 'FW: [Original Subject]' --body 'Forwarding for your review:
Show 3 other places
SKILL.md:25In the instructionsOpen original file
1. Find labeled messages: `gws gmail users messages list --params '{"userId": "me", "q": "label:needs-review"}' --format table`2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`3. Forward via new email: `gws gmail +send --to manager@company.com --subject 'FW: [Original Subject]' --body 'Forwarding for your review:
SKILL.md:26In the instructionsOpen original file
2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`3. Forward via new email: `gws gmail +send --to manager@company.com --subject 'FW: [Original Subject]' --body 'Forwarding for your review:[Original Message Body]'`
SKILL.md:20In the instructionsOpen original file
Find Gmail messages with a specific label and forward them to another address.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill directs an authenticated Gmail tool to search for messages carrying the fixed `needs-review` label, read each message, and then create a new outgoing email.

View source
SKILL.md:24In the instructionsOpen original file
1. Find labeled messages: `gws gmail users messages list --params '{"userId": "me", "q": "label:needs-review"}' --format table`2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`
SKILL.md:25In the instructionsOpen original file
1. Find labeled messages: `gws gmail users messages list --params '{"userId": "me", "q": "label:needs-review"}' --format table`2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`3. Forward via new email: `gws gmail +send --to manager@company.com --subject 'FW: [Original Subject]' --body 'Forwarding for your review:
SKILL.md:26In the instructionsOpen original file
2. Get message content: `gws gmail users messages get --params '{"userId": "me", "id": "MSG_ID"}'`3. Forward via new email: `gws gmail +send --to manager@company.com --subject 'FW: [Original Subject]' --body 'Forwarding for your review:[Original Message Body]'`
Start here · InstructionsSKILL.md
recipe-forward-labeled-emails
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
30
File checksum (to compare versions)
daac36cbf4cda876a2ae5e2e9669b92e8aa167f8a04fe5cba7deb2f4d633256a