Security audit
Security checks for vulnerabilities and agentic risk
This QQ Mail reader is not malicious, but it needs review because generic email requests could trigger access to a configured private mailbox.
Install only if you intend this skill to access your QQ mailbox. Keep the authorization code in the documented secrets file with owner-only permissions, and treat generic requests like checking recent or new mail as potentially authorizing access to that configured QQ inbox.
The trigger phrases are broad enough to match many generic email-related requests, which can cause the agent to invoke this skill without clear user intent to access a specific QQ mailbox. Because the skill uses stored mailbox credentials and reads private email content, overbroad routing increases the chance of unintended access to sensitive data.
The natural-language description is specific to QQ邮箱 and is written entirely in Chinese, but the file does not indicate whether this language/service restriction is an explicit user choice or a documented regional constraint. Under the policy, language or locale constraints should be opt-in or clearly justified when they limit behavior.
No suspicious patterns detected.
