manage-accounts — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited manage-accounts (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the mailbridge account tools to manage accounts. Passwords are stored in your OS credential store (macOS Keychain, Windows Credential Manager, or Linux Keyring) — never in any file.
To connect an account or add a new one, call open_setup. This opens a browser form where the user fills in their email and password. Credentials go straight to the OS credential store on submit — nothing passes through chat.
Use this when the user says:
check_connection returns "No email account connected"If the user prefers to add an account directly, use add_account. Warn them first:
"Your password will be passed through this chat to be saved in your credential store. The setup portal (browser form) is more private — would you prefer that instead?"
If they proceed, collect: name, email, password, and provider (icloud/gmail/outlook/yahoo).
For iCloud, remind them:
xxxx-xxxx-xxxx-xxxx passwordCall list_accounts — show results with ✅ marking the active account.
Call list_accounts first to show what's available.
If the account they want already exists, call switch_account. Confirm with: "Switched to [label]."
If the account doesn't exist yet, say:
"That account isn't set up yet. Want me to open the setup so you can add it?"
If they say yes, call open_setup.
If any tool returns "No email account connected", respond:
"Your email isn't connected yet. Want me to open the setup so you can connect it? It only takes a moment."
If they say yes, call open_setup.
Always call the tool directly — never tell the user they need to switch accounts first.
| What user wants | What to call |
|---|---|
| "remove my account" / "disconnect my email" | remove_account with no arguments |
| "remove [specific account]" | remove_account with name set |
| "remove all accounts" / "disconnect everything" / "reset" | remove_all_accounts |
Rules:
remove_account with no name always removes the currently active account — no switching neededremove_all_accounts wipes everything in one call — all accounts, all passwordsAfter any removal, confirm what happened and offer open_setup to reconnect.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.