gmail-workflows

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Gmail Workflows skill appears broadly coherent with its stated purpose of automating Gmail attachments management, organization, and Drive integration, including analytics and notifications. The data flows align with the described templates (Gmail → Drive/Labels/Archive → Notifications/Sheets). There are moderate security considerations around credential handling and per-action autonomy, but no clear malicious patterns or unverifiable binaries. Overall risk is moderate (suspicious but not malicious) given credential exposure potential and automation scope; controls should emphasize secure handling of OAuth tokens, secrets, and explicit per-action user confirmation for sensitive steps.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fgmail-workflows%2F@f744e341e632c7ddf01c6a84cf6985f15198c5aa