Gmail Draft Email

Atomic node skill to draft an email via Gmail using the gog CLI.

Security Scan

The skill is an instruction-only wrapper around the gog CLI to create Gmail drafts and its requirements/instructions are consistent with that purpose.

Purpose & Capability

The skill only requires the 'gog' binary and its single runtime instruction calls 'gog gmail drafts create ...' — this aligns with a Gmail-draft CLI helper.

Instruction Scope

The SKILL.md instructs only to run a single gog command and retry on transient failures. It does not reference unrelated files or env vars. Note: running the gog CLI will implicitly use whatever local gog/Gmail authentication is present (not declared), and the command concatenates user-supplied fields on a shell line — this can produce injection risks if inputs are not sanitized by the caller.

Install Mechanism

No install spec or code files are present (instruction-only), so nothing is written to disk by the skill itself.

Credentials

The skill declares no env vars (reasonable). However, it implicitly relies on the user's gog CLI credentials/configuration (OAuth tokens or stored auth) to access Gmail; those credentials are not requested explicitly but will be used by the invoked binary.

Persistence & Privilege

The skill is not always-enabled, has no install-time persistence actions, and does not request elevated system-wide privileges.

Assessment

This skill is a minimal wrapper that runs the installed 'gog' CLI to create Gmail drafts. Before installing/use: (1) Ensure the gog binary on your system is from a trusted source and is the exact CLI you expect. (2) Be aware the skill will use whatever local gog/Gmail authentication tokens already exist — review those tokens and permissions. (3) When providing 'to', 'subject', or 'body' values to the agent, avoid passing untrusted raw strings that could cause shell-injection; prefer a mechanism that properly escapes or passes arguments as structured data. (4) Because the skill is instruction-only and runs a local binary, test it in a controlled environment first if you are unsure about the gog CLI provenance.

Lean Philosophy (Principles)

• Kaizen (改善): This skill is an atomic node, broken down into its simplest, smallest component to eliminate waste and ensure perfection.
• Standardized Work (Hyojun Sagyo): This node represents the most efficient, standardized path for this specific task before automation.
• Jidoka (自働化): This node includes autonomous defect detection. It relies on the CLI's self-healing loop and will report errors if drafting fails.

This skill allows the agent to create an email draft using the native CLI.

Cognitive Directives

WHEN [An email needs to be drafted but not sent] THEN [ Execute the following Jidoka-validated loop:

1. Execute Node: Execute the native terminal command gog gmail drafts create --to "..." --subject "..." --body "..." --json.
2. Verification Step (Jidoka): Verify the command returns a valid JSON confirmation. IF it fails or returns an error message, wait 3 seconds and retry (max 3 times). IF it still fails, report the error to the user and STOP. ]

Schema Example

{
  "command": "gog gmail drafts create --to \"[e-mail]\" --subject \"Invoice\" --body \"Please review the attached invoice.\" --json"
}

Expected Output

Confirmation that the draft was created.