bot-process-control
Manages the Gmail Commander bot daemon lifecycle, including start, stop, and log management through launchd.
Install this skill
or
81/100
Security score
The bot-process-control skill was audited on May 13, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 135
Access to hidden dotfiles in home directory
SourceSKILL.md
| 135 | tail -50 ~/.local/state/launchd-logs/gmail-commander-bot/stderr.log |
low line 138
Access to hidden dotfiles in home directory
SourceSKILL.md
| 138 | tail -50 ~/.local/state/launchd-logs/gmail-commander-digest/stderr.log |
low line 144
Access to hidden dotfiles in home directory
SourceSKILL.md
| 144 | tail -20 ~/.local/state/launchd-logs/gmail-oauth-refresher/stderr.log |
low line 178
Access to hidden dotfiles in home directory
SourceSKILL.md
| 178 | → Saved to: ~/.claude/tools/gmail-tokens/<GMAIL_OP_UUID>.json |
medium line 191
Access to hidden dotfiles in home directory
SourceSKILL.md
| 191 | | Source | `~/.claude/automation/gmail-token-refresher/main.swift` | |
medium line 192
Access to hidden dotfiles in home directory
SourceSKILL.md
| 192 | | Binary | `~/.claude/automation/gmail-token-refresher/gmail-oauth-token-hourly-refresher` | |
low line 217
Access to hidden dotfiles in home directory
SourceSKILL.md
| 217 | ls -la ~/.claude/tools/gmail-tokens/<GMAIL_OP_UUID>.json |
low line 224
Access to hidden dotfiles in home directory
SourceSKILL.md
| 224 | rm ~/.claude/tools/gmail-tokens/<GMAIL_OP_UUID>.json |
low line 227
Access to .env file
SourceSKILL.md
| 227 | source $PROJECT_DIR/.env.launchd |
low line 44
External URL reference
SourceSKILL.md
| 44 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
low line 79
External URL reference
SourceSKILL.md
| 79 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
Scanned on May 13, 2026
View Security Dashboard