sofer/gmail-draft
skills/gmail-draft/SKILL.md
Create a draft email in Gmail from provided email data
$ install --global
skillsauthnpx skillsauth add sofer/.agents gmail-draftInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 29, 2026, 9:03 AM33.0s1 file scanned
SKILL.md
- name:
- gmail-draft
- description:
- Create a draft email in Gmail from provided email data
- type:
- atomic
- input:
- Email data: to, subject, body (required); cc, bcc, thread_id, in_reply_to, references (optional)
- output:
- Confirmation with draft ID, thread ID (if threaded), and a human-readable summary
Gmail draft
Purpose
Create a draft email in the user's Gmail account. The draft is saved for human review — this skill never sends emails. It accepts already-composed email content and passes it through to the Gmail API.
Prerequisites
This skill uses the existing Gmail draft script and OAuth credentials at ~/code/airmail/. The following files must exist:
~/code/airmail/gmail_draft.py— the draft creation script~/code/airmail/client_secret.json— Google OAuth client credentials~/code/airmail/gmail_token.json— OAuth token (auto-refreshes)~/code/airmail/email-signature.html— email signature (appended automatically)
Instructions
1. Validate required fields
Check that the following fields are present in the input:
- to — one or more recipient email addresses
- subject — the email subject line
- body — the email body text
If any of these are missing or empty, stop and report which field(s) are missing. Do not proceed.
2. Create the draft
Use the existing gmail_draft.py script in ~/code/airmail/:
For a reply in an existing thread:
python3 ~/code/airmail/gmail_draft.py "<thread_id>" "<to>" "<body>"
For a new conversation:
python3 ~/code/airmail/gmail_draft.py new "<to>" "<subject>" "<body>"
The script:
- Handles OAuth authentication (token refresh if needed)
- Appends the email signature from
email-signature.html - Creates the draft via the Gmail API
- Returns the draft ID on success
3. Handle the response
On success: Report the result with:
- status: "created"
- draft_id: the draft ID returned by the script
- thread_id: the thread ID, if this was a threaded reply
- summary: a human-readable line, e.g. "Draft created: {subject} to {to}"
On error: Report the result with:
- status: "error"
- error: the error message from the script
Do not attempt to retry or work around errors. Report them as-is.
Alternative: direct API usage
If the script is unavailable or a more complex draft is needed (e.g. with CC/BCC), use the Gmail API directly:
import os
from google.oauth2.credentials import Credentials
from google.auth.transport.requests import Request
from googleapiclient.discovery import build
from email.mime.text import MIMEText
import base64
TOKEN_FILE = os.path.expanduser("~/code/airmail/gmail_token.json")
creds = Credentials.from_authorized_user_file(TOKEN_FILE)
if creds.expired and creds.refresh_token:
creds.refresh(Request())
with open(TOKEN_FILE, "w") as f:
f.write(creds.to_json())
service = build("gmail", "v1", credentials=creds)
# Build the message
message = MIMEText(body)
message["to"] = to
message["subject"] = subject
if cc:
message["cc"] = cc
if in_reply_to:
message["In-Reply-To"] = in_reply_to
message["References"] = references or in_reply_to
raw = base64.urlsafe_b64encode(message.as_bytes()).decode()
draft_body = {"message": {"raw": raw}}
if thread_id:
draft_body["message"]["threadId"] = thread_id
draft = service.users().drafts().create(userId="me", body=draft_body).execute()
Error handling
- If
to,subject, orbodyis missing, stop and report which required field(s) are absent - If the script or token file is missing, stop and report the expected path
- If authentication fails, report the auth error and suggest re-authenticating in
~/code/airmail/ - If the API returns an error, report it verbatim
- If
thread_idis invalid, do not fall back to creating an unthreaded draft — report the error
Output format
On success:
status: created
draft_id: {id from API}
thread_id: {thread id, if threaded}
summary: Draft created: {subject} → {to}
On error:
status: error
error: {error description}
Related Skills
sofer/agent-config-audit
tools
VerifiedTrustedCommunity
Check whether Claude and Codex have equivalent access to shared agent resources, skills, hooks, plugins, MCP servers, permissions, startup behaviour, and provider-specific adapter config. Use when comparing agent environments, debugging missing capabilities after restart, or deciding whether to symlink a resource or configure a runtime.
4SKILL.mdUpdated May 10, 2026
sofer/skill-usage
testing
VerifiedTrustedCommunity
Record substantive skill use in an append-only local log. Use after choosing or invoking a non-system skill for real work, when a skill is inspected but not used, or when a skill fails to apply. Do not use for routine system skills or incidental file reads.
4SKILL.mdUpdated May 1, 2026
sofer/problem-statement
testing
VerifiedTrustedCommunity
Turn a vague or underspecified request into a self-contained problem statement. Use when the user has a rough idea, when a request would fail if handed directly to an agent, or before non-trivial work that needs shared understanding.
4SKILL.mdUpdated May 1, 2026
sofer/learning
data-ai
VerifiedTrustedCommunity
Append a one-line learning to ~/.agents/learning-log.md. Use when the user types /learning, or when something genuinely worth remembering surfaced during work and the user confirms it should be captured.
4SKILL.mdUpdated May 1, 2026