Security audit
Gmail-digester
Security checks across malware telemetry and agentic risk
Overview
The skill appears to do what it says—read recent unread Gmail over IMAP and send a digest—but it requires mailbox credentials and exposes email content to the agent for summarization.
Before installing, make sure you are comfortable giving this skill IMAP access to your mailbox. Prefer an app password or limited credential, set it through environment variables if possible, verify the IMAP host is really Gmail or your intended server, and ensure the agent treats email contents as private untrusted text to summarize only.
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.