Sog

This skill appears to be what it claims: a Go-based CLI for mail, calendars, contacts, tasks, and WebDAV. Before installing, consider these practical safety steps: - Prefer installing a specific, signed/tagged release instead of @latest (e.g., go install github.com/visionik/sogcli/cmd/sog@v0.3.0) to reduce supply-chain risk. - Inspect the repository (README, recent commits, open issues, maintainer activity) if you don't already trust the source. - Use the default keychain storage rather than the 'file' storage option so passwords are kept in the system keyring, not in plaintext files. - Be aware the binary will create/modify ~/.config/sog/config.json and will make network connections to whatever servers you configure (this is required functionality). Remove credentials/config if you uninstall. - The SKILL.md contained a unicode-control-chars scanner hit — this may be harmless (emoji/formatting), but if you plan to allow autonomous agent invocation, inspect the raw SKILL.md for hidden characters. If you want extra caution: build the binary from a checked-out tagged commit locally (go build) and audit the code paths that handle password storage and network endpoints before using it with sensitive accounts.