Email Cleanup

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 8, 2026, 11:37 PM
• Findings: 0
• Version: 0.1.4

Overview

The skill's requirements and instructions align with its stated purpose (Outlook inbox cleanup via Microsoft Graph); it requests high-risk mailbox rule scopes but documents the risks and leaves enforcement to the runtime.

This skill is internally coherent for Outlook inbox cleanup, but it asks for a high-risk mailbox scope (MailboxSettings.ReadWrite) that can create server-side rules (including forwarding). Before installing: 1) Only grant MailboxSettings.ReadWrite if you trust the runtime that will execute the Graph calls — the skill cannot enforce blocked actions itself. 2) Prefer granting only Mail.ReadWrite (no rule creation) if you only need folder operations or one-time moves. 3) If you must grant full scopes, test on a non-production account first and inspect the runtime code (or use the referenced email-agent-mcp runtime) to verify it blocks forward/redirect/delete actions. 4) Be aware offline_access allows refresh tokens to be persisted — ensure tokens are stored securely (OS keychain is recommended) and know how to revoke consent (https://myaccount.microsoft.com/consent). 5) Avoid enabling autonomous invocation for this skill unless you have confirmed runtime guardrails. If you cannot verify the runtime enforces the blocked-actions list, treat this as high risk and do not grant MailboxSettings.ReadWrite.