Skills gmail-automation
๐Ÿ“ฆ

gmail-automation

v1.0 Content revision r2 Medium Risk โš™๏ธ External commands

Automate Google Workspace Gmail Tasks

Managing Gmail through repeated manual actions slows inbox workflows. This skill provides command guidance for searching, reading, drafting, sending, and labeling Workspace email.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "gmail-automation" from https://skillstore.io/skills/sickn33-gmail-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-gmail-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "gmail-automation". Find unread messages from the finance team received during the last seven days.

Expected outcome:

A concise list of matching senders, subjects, dates, and message identifiers, with no mailbox changes.

Using "gmail-automation". Prepare a draft announcing the maintenance window to the engineering group.

Expected outcome:

A review-ready recipient list, subject, and message body. The draft remains unsent until approval.

Using "gmail-automation". Suggest how to organize recent project messages.

Expected outcome:

A proposed set of label changes grouped by message, including reasons and a confirmation request.

Security Audit

Medium Risk
v5 โ€ข 7/24/2026 Open versioned report

All 44 static findings are false positives caused by Markdown fences and inline code; no Ruby or shell backtick execution appears. However, SKILL.md directs agents to execute relative Python paths absent from the package and permits mailbox changes without confirmation guidance. Add the referenced scripts and explicit approval boundaries before publication.

1
Files scanned
192
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
Referenced OAuth Scripts Are Missing
SKILL.md directs agents to run relative auth.py and gmail.py paths, but the package contains only SKILL.md. A workspace file at either path could be executed without package provenance.
The documented commands reference two Python scripts, while the code-filled package structure lists only SKILL.md.
Medium
Mailbox Side Effects Lack Confirmation Guidance
The skill documents sending messages, sending drafts, and changing labels without requiring a preview or explicit approval. Autonomous use could cause unintended external communication or mailbox changes.
The command examples perform clear side effects, and the surrounding instructions contain no confirmation or dry-run requirement.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-gmail-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-gmail-automation/security.svg)](https://skillstore.io/skills/sickn33-gmail-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-gmail-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-gmail-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-gmail-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). gmail-automation security audit report (audit version 5) [Author version 1.0]. Skillstore. https://skillstore.io/skills/sickn33-gmail-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-gmail-automation-2026, author = {sickn33}, title = {gmail-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-gmail-automation/audits/5}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "gmail-automation security audit report (audit version 5)" version: "1.0" type: report authors: - name: "sickn33" date-released: "2026-07-24" url: "https://skillstore.io/skills/sickn33-gmail-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-gmail-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Triage a Support Inbox

Find unread customer messages, inspect their content, and prepare a prioritized response list.

Prepare Account Updates

Create reviewed drafts for account notices while preserving recipient and subject requirements.

Organize Project Email

Search recent project messages and plan label changes after explicit approval.

Try These Prompts

Check Gmail Access
Check whether Gmail authentication is active. Do not start login or change credentials without my approval.
Find Unread Messages
Find up to ten unread inbox messages from [sender]. Return sender, subject, and date without modifying any message.
Prepare a Draft
Prepare a draft to [recipient] about [topic]. Show the recipient, subject, and body for approval. Do not send it.
Plan Inbox Triage
Search messages matching [query]. Propose label changes with message identifiers and reasons. Apply nothing until I confirm the exact changes.

Best Practices

  • Verify the active Google account and requested Gmail scope before accessing messages.
  • Preview search results and planned label changes before modifying the mailbox.
  • Confirm recipients, aliases, subject, and body immediately before sending any message.

Avoid

  • Do not execute referenced scripts until their files and provenance are verified.
  • Do not send messages or drafts without explicit user approval.
  • Do not use broad searches or bulk label changes when a narrower query is available.

Frequently Asked Questions

Does this skill support personal Gmail accounts?
No. Its instructions state that a Google Workspace account is required.
Are the required Python scripts included?
No. The audited package contains only SKILL.md, although it references auth.py and gmail.py.
Can it search Gmail with standard operators?
The instructions document sender, recipient, date, label, status, attachment, and folder filters.
Can it send messages immediately?
The documented commands can send messages, but users should review recipients and content before execution.
How are OAuth tokens stored?
The instructions claim system keyring storage, but the missing implementation prevents independent verification.
Does it require an MCP server?
No. The skill describes standalone OAuth and command-line scripts instead of an MCP server.

Developer Details

Author

sickn33

License

Apache-2.0

Author version

v1.0

Skillstore revision

r2

Version notice

The author-declared version is not valid SemVer.

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

8 downloads ยท 97 views

File structure

๐Ÿ“„ SKILL.md