Skip to main content

gmail-access

Enables CLI access to Gmail using 1Password OAuth for reading, searching, and managing emails efficiently.

Install this skill

or
55/100

Security score

The gmail-access skill was audited on May 12, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 31

Template literal with variable interpolation in command context

SourceSKILL.md
31```bash
medium line 41

Template literal with variable interpolation in command context

SourceSKILL.md
41```bash
medium line 66

Template literal with variable interpolation in command context

SourceSKILL.md
66```bash
medium line 180

Template literal with variable interpolation in command context

SourceSKILL.md
180```bash
medium line 189

Template literal with variable interpolation in command context

SourceSKILL.md
189```bash
low line 26

Access to hidden dotfiles in home directory

SourceSKILL.md
26cd ~/.claude/plugins/marketplaces/cc-skills/plugins/gmail-commander/scripts/gmail-cli && bun install && bun run build
low line 50

Access to hidden dotfiles in home directory

SourceSKILL.md
50grep -l "GMAIL_OP_UUID" .mise.local.toml .mise.toml ~/.config/mise/config.toml 2>/dev/null || echo "Not found in standard locations"
medium line 185

Access to hidden dotfiles in home directory

SourceSKILL.md
185**If still NOT_SET**: Inform user to restart their shell or run `source ~/.zshrc`.
medium line 247

Access to hidden dotfiles in home directory

SourceSKILL.md
247| `--save-images` | Download all inline images to disk (default: `~/.claude/tools/gmail-images/<message_id>/`) |
low line 447

Access to hidden dotfiles in home directory

SourceSKILL.md
447~/.claude/tools/gmail-tokens/
low line 466

Access to hidden dotfiles in home directory

SourceSKILL.md
466rm ~/.claude/tools/gmail-tokens/<uuid>.app-credentials.json
low line 477

Access to hidden dotfiles in home directory

SourceSKILL.md
477mv ~/.claude/tools/gmail-tokens/<uuid>.json ~/.claude/tools/gmail-tokens/<uuid>.json.expired
low line 483

Access to hidden dotfiles in home directory

SourceSKILL.md
483~/.claude/automation/gmail-token-refresher/gmail-oauth-token-refresher 2>&1
low line 486

Access to hidden dotfiles in home directory

SourceSKILL.md
486rm ~/.claude/tools/gmail-tokens/<uuid>.json.expired
low line 493

Access to hidden dotfiles in home directory

SourceSKILL.md
493for f in ~/.claude/tools/gmail-tokens/*.json; do
low line 382

External URL reference

SourceSKILL.md
382https://mail.google.com/mail/u/0/#drafts
low line 433

External URL reference

SourceSKILL.md
433Reference: <https://support.google.com/mail/answer/7190>
Scanned on May 12, 2026
View Security Dashboard
Installation guide →