Skip to main content

gmail

Enables searching, fetching, and downloading emails from Gmail using flexible queries and the Gmail API.

Install this skill

or
71/100

Security score

The gmail skill was audited on Apr 8, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 12

Access to hidden dotfiles in home directory

SourceSKILL.md
12Credentials must be configured in `~/.gmail_credentials/`. Run `setup` to check status:
medium line 71

Access to hidden dotfiles in home directory

SourceSKILL.md
71Create `~/.gmail_credentials/credentials.json`:
medium line 298

Access to hidden dotfiles in home directory

SourceSKILL.md
298- `~/.gmail_credentials/credentials.json` - OAuth client credentials
medium line 299

Access to hidden dotfiles in home directory

SourceSKILL.md
299- `~/.gmail_credentials/token.pickle` - Cached auth token
medium line 300

Access to hidden dotfiles in home directory

SourceSKILL.md
300- `~/.gmail_credentials/scope.txt` - Current scope setting
low line 22

External URL reference

SourceSKILL.md
221. Go to [console.cloud.google.com](https://console.cloud.google.com)
low line 78

External URL reference

SourceSKILL.md
78"auth_uri": "https://accounts.google.com/o/oauth2/auth",
low line 79

External URL reference

SourceSKILL.md
79"token_uri": "https://oauth2.googleapis.com/token",
low line 80

External URL reference

SourceSKILL.md
80"redirect_uris": ["http://localhost"]
Scanned on Apr 8, 2026
View Security Dashboard
Installation guide →