Is pfrederiksen/email-intelligence safe?
Yes. pfrederiksen/email-intelligence is safe to install. Oathe's behavioral security audit gave the email-intelligence skill by pfrederiksen a trust score of 82/100 with 3 findings (1 high).
https://github.com/pfrederiksen/email-intelligence
Is pfrederiksen/email-intelligence safe to install?
This email intelligence skill appears to be a legitimate tool for analyzing email inbox health using weather metaphors and classification. However, the installation process accessed sensitive system files including SSH keys and AWS credentials, which is concerning despite no data being exfiltrated.
What security issues were found in pfrederiksen/email-intelligence?
Category Scores
Findings (3)
HIGH Sensitive File Access During Installation -30 ▶
The installation process accessed multiple sensitive canary files including .env, SSH keys, AWS credentials, .npmrc, Docker config, and GCloud credentials. While no data was exfiltrated or files modified, this access pattern is concerning.
MEDIUM Subprocess Execution in Python Script -15 ▶
The email_classify.py script uses subprocess to execute himalaya CLI commands. While the implementation appears safe with proper validation and timeouts, it represents code execution capability.
LOW External Tool Dependency -20 ▶
The skill requires the external himalaya CLI tool to be configured with IMAP access, creating potential privacy implications if the tool has access to email content.
Should I install pfrederiksen/email-intelligence?
Oathe's verdict for pfrederiksen/email-intelligence is SAFE with a trust score of 82/100. Recommendation: Install with caution.