Secure Gmail API CLI. Use when the user wants to read, search, or triage Gmail; sending, replying, forwarding, deleting, or modifying require explicit user c...
Security Analysis
high confidenceThis Gmail CLI skill is coherent and discloses its sensitive Gmail access, credential use, and mutation safeguards, but users should understand it can read and change Gmail data when authorized.
The skill’s Gmail read/search/triage purpose matches the documented Gmail CLI capabilities, including optional send/reply/forward/delete/modify actions that are clearly identified as requiring confirmation.
The instructions include useful safety boundaries: confirm before mutating Gmail, isolate accounts with profiles, and treat email content as untrusted.
The skill depends on an external `porteden` CLI installed via Homebrew or `go install ...@latest`; this is purpose-aligned but users should verify the package source before installing.
Use of `PE_API_KEY`, browser login, or token login is expected for Gmail access, but it gives the CLI access to the selected Gmail account.
Credentials are stored in the system keyring after login, which is disclosed and paired with logout/revocation guidance.
Guidance
Before installing, make sure you trust the Porteden CLI source because it will handle Gmail credentials and email content. Use a dedicated profile for the intended account, keep read-only workflows as the default, and only approve send, reply, forward, delete, or modify commands after checking the exact account and target.
Latest Release
v1.0.0
Initial release of gmail-porteden: a secure Gmail CLI with strong user confirmation and privacy safeguards. - Read, search, and triage Gmail using `porteden email` with easy-to-use filters and date ranges. - Mutating actions (send, reply, forward, delete, modify) require explicit user confirmation before execution. - Supports secure login with browser-based or token auth; credentials stored safely in the system keyring. - Enforces minimal permissions per account (`--profile` or `PE_PROFILE`) and encourages regular logout and token revocation. - Default output is AI-optimized and privacy-preserving; full email bodies only included with explicit request. - Easy installation via Homebrew or Go; CLI fully operates via `porteden` binary.
More by @porteden
Published by @porteden on ClawHub
