gmail-oauth
Facilitates Gmail API access setup via gog CLI, enabling integration and troubleshooting for headless servers.
Install this skill
or
86/100
Security score
The gmail-oauth skill was audited on Feb 9, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 36
Access to system keychain/keyring
SourceSKILL.md
| 36 | gog auth keyring file # Use file-based keyring for headless |
medium line 37
Access to system keychain/keyring
SourceSKILL.md
| 37 | export GOG_KEYRING_PASSWORD="your-password" # Add to .bashrc |
low line 20
External URL reference
SourceSKILL.md
| 20 | 1. Go to https://console.cloud.google.com |
low line 104
External URL reference
SourceSKILL.md
| 104 | **Fix**: This script uses `http://localhost`. Make sure both the auth URL and exchange use the same redirect URI. |
low line 113
External URL reference
SourceSKILL.md
| 113 | - The URL will look like: `http://localhost/?code=4/0ABC...` |
low line 134
External URL reference
SourceSKILL.md
| 134 | **Fix**: Use `http://localhost` redirect instead (this script's default). After approval, browser redirects to localhost with code in URL. |
Scanned on Feb 9, 2026
View Security Dashboard