Security audit
Security checks across malware telemetry and agentic risk
This email automation skill is disclosed, but it needs review because it can let an AI read personal mail, send messages and attachments, package local files, and run scheduled checks without strong confirmation guardrails.
Install only if you are comfortable giving the agent access to your mailbox and SMTP account. Use an app-specific password, limit scheduled jobs to read-only checks unless you explicitly approve sending, review every recipient and attachment list before outbound mail, and avoid using the file-search-and-zip workflow on broad folders such as home, Documents, Downloads, or any directory containing secrets.
def run_himalaya(args: list) -> str:
"""Run himalaya CLI and return output."""
result = subprocess.run(
["himalaya"] + args,
capture_output=True,
text=True,smtp_host = smtp_host or os.environ.get("SMTP_HOST", "smtp.mail.me.com")
smtp_port = int(smtp_port or os.environ.get("SMTP_PORT", 587))
smtp_user = smtp_user or os.environ.get("SMTP_USER")
smtp_password = smtp_password or os.environ.get("SMTP_PASSWORD")
from_name = from_name or os.environ.get("FROM_NAME", "Sol AI")
if not smtp_user or not smtp_password:def run_himalaya(args: list) -> str:
"""Run himalaya CLI and return output."""
result = subprocess.run(
["himalaya"] + args,
capture_output=True,
text=True,VirusTotal findings are pending for this skill version.