Himalaya

• Risk level: Low
• Analyzed: Apr 19, 2026, 4:47 AM
• Findings: 0
• Version: 1.0.0

Overview

This is an instruction-only helper for the Himalaya CLI whose requirements and instructions are consistent with its stated purpose and it does not request unrelated credentials or install anything.

This skill appears to be a documentation/cheat-sheet for the Himalaya CLI and is internally coherent. Before using it: ensure you actually have the himalaya binary installed (the skill only suggests commands), review any commands it provides before running them (commands like message save/export or message forward will touch your mail and may write files), and be aware that the suggested commands operate on your local mail configuration and accounts (for example --config can point to a different config file). Because the skill is instruction-only and requests no credentials, it cannot itself exfiltrate secrets — but any commands you copy-and-run can access your mailbox, so only run commands you understand. If you want the agent to execute commands on your behalf, restrict that behavior to trusted commands and verify outputs.