github JavaScript analyzed 7031354

sweetrb/apple-mail-mcp

MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 7031354 · analyzer v28 · 11h ago

over-broad OAuth scope https://mail.google.com/ sweetrb-apple-mail-mcp-7031354/build/cli.js :9235 scope: this.options.scope || "https://mail.google.com/",

code evidence vv2.9.1 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 65

fs sweetrb-apple-mail-mcp-7031354/build/cli.js :1358 return resolveStream(fs.createReadStream(content.path), callback);
fs sweetrb-apple-mail-mcp-7031354/src/cli.ts :23 import { readFileSync, realpathSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/index.ts :28 import { writeFileSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/services/appleMailManager.ts :29 } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/services/fileConfig.ts :18 import { existsSync, readFileSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/services/smtpMailer.ts :22 import { existsSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/services/templateStore.ts :12 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/utils/attachmentMaterialize.ts :10 import { writeFileSync, rmSync, mkdtempSync } from "fs";
fs sweetrb-apple-mail-mcp-7031354/src/utils/contactsDb.ts :19 import { existsSync, readdirSync } from "fs";

shell sweetrb-apple-mail-mcp-7031354/build/cli.js :11140 var { spawn } = __require("child_process");
shell sweetrb-apple-mail-mcp-7031354/src/services/appleMailManager.ts :16 import { spawnSync } from "child_process";
shell sweetrb-apple-mail-mcp-7031354/src/services/smtpMailer.ts :20 import { execFileSync } from "child_process";
shell sweetrb-apple-mail-mcp-7031354/src/utils/applescript.ts :10 import { execSync, spawnSync } from "child_process";

secrets sweetrb-apple-mail-mcp-7031354/build/cli.js :11738 var ETHEREAL_API_KEY = (process.env.ETHEREAL_API_KEY || "").replace(/\s*/g, "") || null;

preinstall (suspicious) sweetrb-apple-mail-mcp-7031354/package.json :19 node -e "const fs=require('fs');const ua=process.env.npm_config_user_agent||'';if(fs.existsSync('.git')&&!ua.startsWith('pnpm')){console.error('\nThis repo uses pnpm. npm/yarn resolve dependencies off
prepublishOnly sweetrb-apple-mail-mcp-7031354/package.json :36 pnpm run lint && pnpm test && pnpm run build
prepare sweetrb-apple-mail-mcp-7031354/package.json :37 husky; pnpm run build