Security audit
Security checks across malware telemetry and agentic risk
This skill appears to be a real Google Workspace automation tool, but it needs careful review because it grants broad, persistent Google access through a third-party OAuth flow and includes powerful write, delete, and messaging actions.
Install only if you are comfortable giving this skill broad access to Gmail, Drive, Calendar, Docs, Sheets, Slides, Contacts, and Google Chat. Review the Google consent screen carefully, prefer a dedicated or low-risk Google account, avoid bulk-trash -y unless you explicitly verified the query, and revoke the OAuth grant when you are done.
@cli.command("bulk-trash")
@click.argument("query")
@click.option("--max", "-n", "max_results", type=int, help="Max messages to trash")
@click.option("--yes", "-y", is_flag=True, help="Skip confirmation prompt")
def bulk_trash(query: str, max_results: int | None, yes: bool):
"""Trash all messages matching a query.66/66 vendors flagged this skill as clean.
No suspicious patterns detected.