Gmail

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

assistant/CLAUDE.md

assistant/src/approvals/CLAUDE.md

assistant/src/notifications/CLAUDE.md

assistant/src/runtime/CLAUDE.md

gateway/CLAUDE.md

**To actually send**: Use `bun run scripts/gmail-email.ts send-draft` with the draft ID after the user has reviewed it. Only run send-draft when the user explicitly says "send it" or equivalent.

Audit 0.4.1 · source sha 19bc86343b63 · 14 Oct 2026Report an issue or request a re-scan

• Publishervellum-ai GitHub organizationOwner of the repository this skill is read from
• Source foldervellum-ai/vellum-assistant/skills/gmailThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict19bc86343b63A new audit runs when the source changes
• Repository statusNot archivedLast push 1 day ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Manage Gmail email — drafting, sending, organizing, filters, vacation replies, and inbox analysis

---
name: gmail
description: Manage Gmail email — drafting, sending, organizing, filters, vacation replies, and inbox analysis
compatibility: "Designed for Vellum personal assistants"
metadata:
  icon: assets/icon.svg
  emoji: "📨"
  vellum:
    category: "email"
    display-name: "Gmail"
    user-invocable: true
---

This skill provides Gmail-specific operations beyond the shared **messaging** skill. For cross-platform messaging (send, read, search, reply), use the messaging skill. Gmail operations depend on the messaging skill's provider infrastructure - load messaging first if Gmail is not yet connected.

## Script Reference

All operations use CLI scripts that return JSON:

- **Success**: `{ "ok": true, "data": ... }`
- **Failure**: `{ "ok": false, "error": "..." }`

| Script             | Operation               | Description                                                                  |
| ------------------ | ----------------------- | ---------------------------------------------------------------------------- |
| `gmail-email.ts`   | `draft`                 | Create email drafts in the Drafts folder (including reply drafts)            |
| `gmail-email.ts`   | `send-draft`            | Send an existing draft (**requires explicit user confirmation**)             |
| `gmail-email.ts`   | `forward`               | Create forward drafts, preserving attachments                                |
| `gmail-email.ts`   | `trash`                 | Move messages to Trash                                                       |
| `gmail-manage.ts`  | `label`                 | Add or remove labels on messages                                             |
| `gmail-manage.ts`  | `follow-up`             | Track/untrack messages for follow-up using a dedicated "Follow-up" label     |
| `gmail-manage.ts`  | `attachments`           | List and download email attachments                                          |
| `gmail-manage.ts`  | `filters`               | Create, list, and delete Gmail filters                                       |
| `gmail-manage.ts`  | `vacation`              | Get, enable, or disable the vacation auto-responder                          |
| `gmail-manage.ts`  | `unsubscribe`           | Unsubscribe from mailing lists (**requires explicit user confirmation**)     |
| `gmail-scan.ts`    | `sender-digest`         | Scan inbox and group messages by sender for declutter workflows              |
| `gmail-scan.ts`    | `outreach-scan`         | Identify cold outreach senders (no List-Unsubscribe header)                  |
| `gmail-archive.ts` | `archive`               | Archive messages (single, batch message_ids, cache_key+sender-emails, query) |
| `gmail-archive.ts` | `archive --dry-run`     | Preview what would be archived without executing (writes staged ops to log)  |
| `gmail-archive.ts` | `archive --resume`      | Resume an interrupted archive run from its last checkpoint                   |
| `gmail-commit.ts`  | `commit`                | Execute all staged ops from a dry-run                                        |
| `gmail-commit.ts`  | `cancel`                | Delete a run log without executing anything                                  |
| `gmail-runs.ts`    | `list`                  | List recent operation runs with status summaries                             |
| `gmail-runs.ts`    | `inspect`               | Show detailed log entries for a specific run                                 |
| `gmail-runs.ts`    | `prune`                 | Delete operation logs older than 30 days                                     |
| `gmail-reverse.ts` | `--run-id`              | Reverse all committed ops in a run (un-archive, un-label, un-trash)          |
| `gmail-reverse.ts` | `--run-id --thread`     | Reverse a specific message within a committed run                            |
| `gmail-prefs.ts`   | `list`                  | List blocklist and safelist preferences                                      |
| `gmail-prefs.ts`   | `add-blocklist`         | Add sender emails to the blocklist                                           |
| `gmail-prefs.ts`   | `add-safelist`          | Add sender emails to the safelist                                            |
| `gmail-prefs.ts`   | `remove-blocklist`      | Remove sender emails from the blocklist                                      |
| `gmail-prefs.ts`   | `remove-safelist`       | Remove sender emails from the safelist                                       |
| `gmail-prefs.ts`   | `get-management-config` | Get inbox management config (stage, interrupt threshold, last run)           |
| `gmail-prefs.ts`   | `set-management-config` | Update inbox management config (--stage, --interrupt-threshold, --last-run)  |

### Email Operations

```bash
# Draft an email
bun run scripts/gmail-email.ts draft --to "[email protected]" --subject "Hello" --body "Message body"

# Draft a reply in a thread
bun run scripts/gmail-email.ts draft --to "[email protected]" --subject "Re: Hello" --body "Reply body" --thread-id "18f..." --in-reply-to "18f..."

# Send an existing draft (REQUIRES user confirmation before execution)
bun run scripts/gmail-email.ts send-draft --draft-id "r123..."

# Forward a message
bun run scripts/gmail-email.ts forward --message-id "18f..." --to "[email protected]" --text "FYI"

# Trash a message
bun run scripts/gmail-email.ts trash --message-id "18f..."
```

### Management Operations

```bash
# Label - add a label to a message
bun run scripts/gmail-manage.ts label --message-id "18f..." --add-labels "Work,Important"

# Follow-up - track a message for follow-up
bun run scripts/gmail-manage.ts follow-up --action track --message-id "18f..."

# Attachments - list attachments on a message
bun run scripts/gmail-manage.ts attachments --action list --message-id "18f..."

# Attachments - download a specific attachment
bun run scripts/gmail-manage.ts attachments --action download --message-id "18f..." --attachment-id "ANGj..." --filename "rep

Excerpt, first 6,001 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/vellum-ai/vellum-assistant
git -C vellum-assistant checkout 19bc86343b63

Works in

1. 2026-10-14
   ✓SAFE B 89 / 100

   first audit · source 19bc86343b63

Questions about Gmail

• github.com/vellum-ai/vellum-assistant/tree/main/skills/gmail — the audited source at commit 19bc86343b63 and every finding aboveObserved · 14 Oct 2026

Spotted something wrong? Report a correction · Methodology