OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill allows an agent to retrieve summaries of unread Gmail messages using the gws CLI tool. It introduces a potential indirect prompt injection surface from processed email headers, but contains no malicious behavior.
Detected behaviors
No alerts
1 issue
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed