add-gmail
Integrates Gmail with Deus, enabling email triggers and task scheduling through GCP OAuth setup.
Install this skill
or
81/100
Security score
The add-gmail skill was audited on Jun 1, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 43
Access to hidden dotfiles in home directory
SourceSKILL.md
| 43 | mkdir -p ~/.gmail-mcp |
low line 44
Access to hidden dotfiles in home directory
SourceSKILL.md
| 44 | cp "/path/user/provided/gcp-oauth.keys.json" ~/.gmail-mcp/gcp-oauth.keys.json |
medium line 47
Access to hidden dotfiles in home directory
SourceSKILL.md
| 47 | If user pastes JSON content, write it to `~/.gmail-mcp/gcp-oauth.keys.json`. |
medium line 61
Access to hidden dotfiles in home directory
SourceSKILL.md
| 61 | If that fails (some versions don't have an auth subcommand), try `timeout 60 npx -y @gongrzhe/server-gmail-autoauth-mcp || true`. Verify with `ls ~/.gmail-mcp/credentials.json`. |
low line 98
Access to hidden dotfiles in home directory
SourceSKILL.md
| 98 | rm ~/.gmail-mcp/credentials.json |
medium line 104
Access to hidden dotfiles in home directory
SourceSKILL.md
| 104 | - Verify `~/.gmail-mcp` is mounted: check `src/container-runner.ts` for the `.gmail-mcp` mount |
low line 31
External URL reference
SourceSKILL.md
| 31 | > 1. Open https://console.cloud.google.com — create a new project or select existing |
Scanned on Jun 1, 2026
View Security DashboardGitHub Stars 39
Rate this skill
Categorysales
UpdatedJune 15, 2026
openclawapicustomer-success-managertechnical-supportoperations-managergmailgcpsalessupportoperations
sliamh11/Deus