Recipe Label And Archive Emails

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:20 PM UTC
• Version:
  1.0.12

Overview

This is a small Gmail cleanup recipe that clearly matches its purpose, though it can change mailbox labels and inbox visibility.

Install only if you intend to use gws with Gmail. Before running the modify commands, confirm the Google account, search results, message ID, and label ID; archiving removes messages from the inbox but does not delete them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill provides direct commands to modify Gmail message state by adding labels and removing the INBOX label, which archives messages, but it does not warn the user that these operations are state-changing and can affect mailbox visibility and organization. In a productivity recipe that users may copy verbatim, this creates a real risk of unintended bulk mailbox modification, especially if the search query or message IDs are broadened or automated.

VirusTotal

65/65 vendors flagged this skill as clean.