Apple Mail Search Safe 5.0.4

Apple Mail search on macOS with fast metadata and full body lookup. Use for finding messages in Mail.app by subject/sender/recipient/date, opening messages,...

Security Scan

The skill's requirements and instructions align with a macOS Apple Mail search utility; the main risks are the npm install step (third‑party package) and AppleScript/OS permission prompts, not mismatches in declared purpose.

Purpose & Capability

Name/description match the runtime instructions: the skill installs a CLI (fruitmail) and instructs the agent to run searches against the local Mail SQLite index and use AppleScript for body content. Requested binaries and referenced paths are appropriate for the stated purpose.

Instruction Scope

SKILL.md limits actions to reading Mail.app data (Envelope Index path) and optionally using AppleScript to read message bodies. It does not request unrelated files, environment variables, or external endpoints. It documents a safe --copy mode to avoid touching the live DB.

Install Mechanism

Install uses npm (apple-mail-search-cli) to create a fruitmail binary. npm installs can execute arbitrary install scripts and pull code from the registry, which is a moderate-risk but expected choice for a CLI distributed via npm. Recommend verifying the package on npm/github before installing.

Credentials

No environment variables, credentials, or unrelated config paths are requested. The skill needs access to the Mail DB and AppleScript capabilities, which are proportional to the task.

Persistence & Privilege

Skill is not marked always:true and requests no system-wide persistent privileges. Running the CLI may prompt macOS permission dialogs (AppleScript/Accessibility/Full Disk Access) — normal for this functionality.

Assessment

This skill appears coherent for searching Apple Mail locally. Before installing: (1) verify the npm package (apple-mail-search-cli) and the linked GitHub repo to ensure the published package matches source; (2) prefer running fruitmail with --copy to avoid touching the live Envelope Index; (3) be aware macOS may prompt for AppleScript/Accessibility/Full Disk Access to read message bodies — only grant those permissions if you trust the package; (4) note the registry metadata _meta.json ownerId differs from the skill metadata — a minor inconsistency to check on the package/publisher identity. If you aren’t on macOS or cannot verify the package source, avoid installing.

Fruitmail (Fast & Safe)

Fast SQLite-based search for Apple Mail.app with full body content support.

Installation

npm install -g apple-mail-search-cli

Usage

# Complex search
fruitmail search --subject "invoice" --days 30 --unread

# Search by sender
fruitmail sender "@amazon.com"

# List unread emails
fruitmail unread

# Read full email body (supports --json)
fruitmail body 94695

# Open in Mail.app
fruitmail open 94695

# Database stats
fruitmail stats

Commands

Command	Description
search	Complex search with filters
sender <query>	Search by sender email
unread	List unread emails
body <id>	Read full email body (AppleScript)
open <id>	Open email in Mail.app
stats	Database statistics

Search Options

--subject <text>   Search subject lines
--days <n>         Last N days
--unread           Only unread emails
--limit <n>        Max results (default: 20)
--json             Output as JSON
--copy             Copy DB before query (safest mode)

Examples

# Find bank statements from last month
fruitmail search --subject "statement" --days 30

# Get unread emails as JSON
fruitmail unread --json | jq '.[] | .subject'

# Find emails from Amazon
fruitmail sender "@amazon.com" --limit 50

Performance

Method	Time for 130k emails
AppleScript (full iteration)	8+ minutes
SQLite (this tool)	~50ms

Technical Details

• Database: ~/Library/Mail/V{9,10,11}/MailData/Envelope Index
• Query method: SQLite (read-only) + AppleScript (body content)
• Safety: Read-only mode prevents modification; optional --copy mode available

Notes

• macOS only — queries Apple Mail.app's local database
• Read-only — can search/read but cannot compose/send
• To send emails: Use the himalaya skill (IMAP/SMTP)

Source

https://github.com/gumadeiras/fruitmail-cli