Security audit
OCTO Agent Mail
Security checks for vulnerabilities and agentic risk
Overview
This plugin does what it says: it connects authorized OCTO Agent Mail accounts, monitors inbox changes, and exposes scoped mail tools with owner/server controls.
Install this only for Agents that should handle OCTO Agent Mail. Before enabling automatic sending, verify the mailbox owner approval flow, outbound rules, and server-side safety policy because the plugin can dispatch inbound mail to an Agent and submit replies or new messages when the configured mode allows it.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.