attrove
Integrates Attrove SDK to connect Gmail, Slack, and Outlook for AI-driven productivity queries.
Install this skill
or
87/100
Security score
The attrove skill was audited on Feb 12, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 66
Template literal with variable interpolation in command context
SourceSKILL.md
| 66 | ```typescript |
low line 70
Access to .env file
SourceSKILL.md
| 70 | clientId: process.env.ATTROVE_CLIENT_ID, |
low line 71
Access to .env file
SourceSKILL.md
| 71 | clientSecret: process.env.ATTROVE_CLIENT_SECRET, |
low line 45
External URL reference
SourceSKILL.md
| 45 | - The SDK defaults to `https://api.attrove.com` — no baseUrl configuration needed |
low line 76
External URL reference
SourceSKILL.md
| 76 | // Send user to: https://connect.attrove.com/integrations/connect?token=${token}&user_id=${userId} |
low line 169
External URL reference
SourceSKILL.md
| 169 | **HTTP transport** (Claude Desktop, ChatGPT) — connect to `https://api.attrove.com/mcp`. Auth is automatic via OAuth 2.1. |
low line 201
External URL reference
SourceSKILL.md
| 201 | - SDK: https://www.npmjs.com/package/@attrove/sdk |
low line 202
External URL reference
SourceSKILL.md
| 202 | - MCP: https://www.npmjs.com/package/@attrove/mcp |
low line 206
External URL reference
SourceSKILL.md
| 206 | - Dashboard: https://connect.attrove.com |
Scanned on Feb 12, 2026
View Security DashboardGitHub Stars 55
Rate this skill
Categorymarketing
UpdatedApril 29, 2026
openclawapigrowth-marketerproduct-marketercustomer-success-managersdrsales-engineergmailslackoutlookplaidmarketingsales
NeverSight/skills_feed