iGPT email search

• Risk level: Low
• Analyzed: Feb 19, 2026, 12:20 PM
• Findings: 0
• Version: 1.0.3

Overview

The skill's requirements and runtime instructions line up with an email-search integration: it only asks for an iGPT API key and uses the iGPT recall/search API; nothing requested appears unrelated to the stated purpose.

This skill appears internally consistent, but consider these practical points before enabling it: (1) The IGPT_API_KEY is sensitive — treat it like a password and only provide a key scoped for this use if possible. (2) The provider (igpt.ai) will access your connected inbox via OAuth connectors — review the connector consent screens and the provider's privacy policy to confirm you trust how they will store and index email content. (3) The SKILL.md suggests pip installing igptai; verify the package source (the GitHub repo URL in the doc) and, if you require stronger guarantees, install/run in an isolated environment or review the package code. (4) If you plan to allow autonomous agents to call this skill, be aware that the agent could perform searches without further prompts — only enable that if you trust the agent’s autonomy and intent.