Is Claude 2 Mail safe to install?

SaferSkills independently audited Claude 2 Mail (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.5 KB · Markdown

claude-2-mail

Local MCP server for Gmail + Google Calendar. Lets your AI agent read/send email and manage your calendar — runs locally via stdio.

Tools

Tool	What it does
`mail_list`	List recent emails (folder, count, unread filter)
`mail_read`	Read full email by UID
`mail_search`	Search by sender, subject, body, date range
`mail_draft`	Draft a reply or new email
`mail_send`	Send an approved email
`mail_auto_reply`	Auto-reply to whitelisted senders
`calendar_list`	List upcoming events
`calendar_create`	Create a new event
`calendar_update`	Update or delete an event

Prerequisites

Python 3.10+
A Google account
An MCP-compatible client (Claude Code, Cursor, etc.)

Setup

Auth Pipeline (Overview)

There are two separate auth systems:

System	Used for	How it works
Gmail App Password	IMAP (read) + SMTP (send)	16-char password from Google Account settings
Google OAuth2	Calendar API	Browser-based consent flow, saves a token file

You need both. App Password for email, OAuth2 for calendar.

1. Install Dependencies

pip install mcp google-api-python-client google-auth-httplib2 google-auth-oauthlib

2. Create a Gmail App Password (for Email)

Gmail uses IMAP/SMTP with an App Password — NOT your real Google password.

Steps:

Go to Google Account Security
Enable 2-Step Verification (required — App Passwords won't work without it)
Go to App Passwords
Select app: Mail, device: Other (Custom name) → type "claude-2-mail"
Click Generate → copy the 16-character password (e.g. abcd efgh ijkl mnop)

Why: Google blocks "less secure apps". App Passwords are per-app tokens that bypass this.

3. Create a Google Cloud Project (for Calendar)

Calendar needs OAuth2. This is a multi-step process — follow in order:

Step A — Create project + enable API:

Go to Google Cloud Console
Click Select a project → New Project → name it → Create
Select your new project
Go to APIs & Services → Library
Search "Google Calendar API" → click it → Enable

Step B — Configure OAuth consent screen:

Go to APIs & Services → OAuth consent screen
User type: External → Create
Fill in: App name, User support email, Developer contact email
Save and Continue through scopes (add nothing) → Back to Dashboard
Under Test users → Add users → add your own email address

Why Test users: Until your app is published, only test users can authorize it. Without this step, OAuth will fail with "access_blocked".

Step C — Create OAuth credentials:

Go to APIs & Services → Credentials
Create Credentials → OAuth client ID
Application type: Desktop app → name it → Create
Click Download JSON → save the file

Why Desktop app: MCP servers run locally. "Desktop app" type doesn't need a redirect URI — it uses localhost callback.

4. Configure

mkdir -p ~/.config/claude-2-mail

cp config/config.template.json ~/.config/claude-2-mail/config.json
cp config/.secrets.template ~/.config/claude-2-mail/.secrets
cp config/credentials.json.template ~/.config/claude-2-mail/credentials.json

Edit each file:

`~/.config/claude-2-mail/config.json` — your email, display name, settings.

`~/.config/claude-2-mail/.secrets` — your App Password:

export GMAIL_APP_PASSWORD="abcd efgh ijkl mnop"

`~/.config/claude-2-mail/credentials.json` — paste the downloaded OAuth JSON.

Lock permissions:

chmod 600 ~/.config/claude-2-mail/config.json
chmod 600 ~/.config/claude-2-mail/.secrets
chmod 600 ~/.config/claude-2-mail/credentials.json

5. Source the Secrets

Add to ~/.bashrc or ~/.zshrc:

[ -f ~/.config/claude-2-mail/.secrets ] && source ~/.config/claude-2-mail/.secrets

Reload: source ~/.bashrc

6. Register in Your MCP Client

Claude Code (~/.mcp.json):

{
  "mcpServers": {
    "gmail-calendar": {
      "command": "python",
      "args": ["/path/to/claude-2-mail/gmail_calendar_mcp.py"],
      "env": {
        "GMAIL_MAIL_CONFIG": "/home/YOUR_USER/.config/claude-2-mail/config.json"
      }
    }
  }
}

7. First Run

First Calendar use opens a browser for OAuth approval. One-time — token saves for future.

Troubleshooting

Problem	Fix
`AUTHENTICATIONFAILED` (IMAP)	Regenerate App Password. 2FA must be on.
`invalid_client` (OAuth)	Check credentials.json is Desktop app type.
`access_blocked` (OAuth)	Add your email as Test user in OAuth consent screen.
`Token expired`	Delete `calendar_token.json`, re-auth.
`Config not found`	Check `GMAIL_MAIL_CONFIG` env var path.
`CredentialsWithRegionalAccessBoundary.refresh() missing argument`	Update google-auth: `pip install --upgrade google-auth`
Missing pip libs	`pip install google-api-python-client google-auth-httplib2 google-auth-oauthlib`

Testing

pip install -e ".[dev]"
pytest tests/ -v

Security

App Password in .secrets (chmod 600), NOT in config.json or shell rc
OAuth tokens stored chmod 600
Logging redacts emails/tokens/passwords at INFO level
IMAP input escaped to prevent injection
Narrow OAuth scopes only

License

MIT.

Claude 2 Mail— agent skill

Is Claude 2 Mail safe to install?

claude-2-mail

Tools

Prerequisites

Setup

Auth Pipeline (Overview)

1. Install Dependencies

2. Create a Gmail App Password (for Email)

3. Create a Google Cloud Project (for Calendar)

4. Configure

5. Source the Secrets

6. Register in Your MCP Client

7. First Run

Troubleshooting

Testing

Security

License

Audit the pieces. Scan the whole. Decide.