Mail Mcp

This skill appears to do what it claims (install and use a mail MCP tool) but there are two things to weigh before installing: - Sensitive credentials: The runtime instructions require putting your email username/password (or other IMAP/SMTP credentials) into ~/.mcporter/mcporter.json or environment variables. The skill metadata does not declare these required secrets. Only install if you are comfortable storing credentials in that location and understand who will have access. Prefer creating a dedicated account or using App Passwords/least-privilege credentials rather than your primary mailbox password. - Installing code from GitHub: The install uses 'pip install git+https://github.com/AdJIa/mail-mcp-server.git' which will execute code from that repository on your machine. Review the repository source (and its maintainer) before installing. To reduce risk, run the install inside a Python virtual environment or sandbox, and inspect the package contents first. Recommended next steps before proceeding: 1) Inspect the GitHub repo (AdJIa/mail-mcp-server) and confirm its trustworthiness and activity. 2) Use an app-specific password or a dedicated mailbox account for automation. 3) Install in a virtualenv or isolated environment rather than system-wide; avoid '--break-system-packages'. 4) If you need stronger guarantees, ask the author to declare required env vars in metadata and provide documentation about how credentials are used/stored and whether any telemetry or external endpoints are contacted. If you want, I can fetch and summarize the GitHub repository files (setup.py/pyproject, main code) so you can better judge whether the package is safe to install.