Mail Skill

This skill appears to implement mail send/receive via a helper (mail-mcp), but pay attention before installing: - Sensitive credentials: You will need to provide an email account and password (or app password). The SKILL.md suggests placing these in ~/.mcporter/mcporter.json (likely plaintext). Prefer creating an app-specific or least-privileged account and avoid reusing primary credentials. Check file permissions (chmod 600) and consider using a credentials manager or environment variables scoped to a short-lived session. - Install source: The included install.sh runs pip install directly from a GitHub repository. Inspect the upstream repository (https://github.com/AdJIa/mail-mcp-server) before running the installer. Run installs inside a virtualenv or container rather than system Python, and avoid --break-system-packages unless you understand the effect. - Missing declarations: The registry metadata does not declare required env vars/primary credential. Ask the publisher to declare the required credentials explicitly and to document how credentials are stored and protected. - What to do now: If you want to proceed, review the GitHub repo code, run the installer in an isolated environment, and use an app-specific mailbox/credentials. If you cannot audit the upstream code, treat this skill as higher risk and avoid supplying real account credentials.