Security audit
Pidgeon Email
Security checks for vulnerabilities and agentic risk
Overview
This email integration’s mailbox access, automatic replies, and saved sign-in credentials match its documented purpose and offer clear controls.
Restrict addresses and use dmPolicy="allowlist" if only trusted senders should reach your agent. Keep suspicious="hold", grant only needed mailbox access, and remember that permitted mail triggers automatic agent responses. Firewall filtering relies on Pidgeon's verdicts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.