Security audit
ShellMail - Email Built for AI Agents
Security checks for vulnerabilities and agentic risk
Overview
This is a clearly disclosed ShellMail email-client skill with sensitive but purpose-aligned mailbox access and confirmation-gated destructive actions.
Install only if you trust shellmail.ai with the mailbox and OTPs used through this skill. Use it for agent-specific or disposable email, review any config.patch command before saving the token, and require explicit confirmation before sending mail or deleting messages/address data.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.