Security audit
Security checks for vulnerabilities and agentic risk
This skill clearly supports Gmail lead triage through AISA and includes user-confirmation safeguards for sending, drafting, labeling, and other mailbox changes.
Install only if you are comfortable giving the AISA gateway access to the selected Gmail account for lead-desk workflows. Review OAuth permissions, keep the AISA_API_KEY private, and use the built-in confirmation steps before sending email, creating labels, archiving batches, or handling attachments.
The trigger examples include generic terms like "follow-up," "draft," and "archive," which are common in everyday email or productivity conversations and are not tightly scoped to this skill's Gmail lead-desk workflow. Although the document describes the domain elsewhere, this specific trigger list lacks clear constraints or negative examples for when these keywords should not invoke the skill.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl "https://api.aisa.one/apis/v1/composio/auth/session/info" \
-H "Authorization: Bearer $AISA_API_KEY"
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Confirm with user before POST.
curl -X POST "https://api.aisa.one/apis/v1/composio/connected_accounts/link" \
-H "Authorization: Bearer $AISA_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The skill instructs operators to fetch unread Gmail messages and optionally upload attachments through a third-party gateway, but it does not include a clear user-facing privacy warning or explicit consent step for mailbox-content access. In this context, emails and attachments may contain sensitive personal, customer, or business data, so normalizing retrieval and file handling without prominent disclosure increases the risk of over-collection and unintended data exposure.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Optional — NL argument generation:
curl -X POST "https://api.aisa.one/apis/v1/composio/tools/execute/GMAIL_FETCH_EMAILS/input" \
-H "Authorization: Bearer $AISA_API_KEY" \
-H "Content-Type: application/json" \
-d '{ "text": "List 10 unread inbox emails" }'
Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.
- `GMAIL_FETCH_EMAILS` results are **not** guaranteed sorted by date — sort by `internalDate` when showing "oldest first".
- `messages` may be absent or empty — valid zero-result state.
- Large mailboxes: `include_payload: false` first, then hydrate selected threads/messages.
- Body in payload is **base64url** in `payload.parts` — decode with URL-safe base64 rules.
Default sales noise filter:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Only these `tool_slug` values may be used by **gmail-lead-desk**. For any other Gmail tool, ask the user and default to **refuse** unless they explicitly need advanced mailbox admin.
**Schema:** `GET https://api.aisa.one/apis/v1/composio/tools/{tool_slug}`
**Execute:** `POST https://api.aisa.one/apis/v1/composio/tools/execute/{tool_slug}` — see [`connect_and_execute.md`](./connect_and_execute.md).
---
No suspicious patterns detected.