Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add sweetrb/apple-mail-mcp --skill apple-mailgit clone --depth 1 https://github.com/sweetrb/apple-mail-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sweetrb/apple-mail-mcp/apple-mail)<a href="https://agentmods.dev/skills/sweetrb/apple-mail-mcp/apple-mail"><img src="https://agentmods.dev/badge/skills/sweetrb/apple-mail-mcp/apple-mail/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sweetrb/apple-mail-mcp/apple-mail"><img src="https://agentmods.dev/badge/skills/sweetrb/apple-mail-mcp/apple-mail.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 81 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.04451 |
| Opus 5.5 | $0.00019 | $0.01780 |
| Sonnet 5.5 | $0.00009 | $0.00890 |
| Haiku 4.5 | $0.00005 | $0.00445 |
Grade A, and why
apple-mail scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 398 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Apple Mail Skill
This skill enables you to manage Apple Mail on macOS through natural language. Use it whenever the user mentions email, wants to send messages, or needs to read, search, or organize their inbox.
Keep plugin and MCP server enablement under the user's control. Do not enable either or override a disabled setting unless the user explicitly requests it.
When to Use This Skill
Use this skill when the user:
- Wants to check their email or inbox
- Asks to find or search for emails
- Wants to read a specific email message
- Needs to send an email or reply to one
- Wants to create a draft email for review
- Asks to forward an email to someone
- Wants to mark emails as read/unread or flag them
- Asks to delete or move emails
- Mentions Apple Mail, Mail app, inbox, or "my email"
Available Tools
Message Operations
| Tool | Purpose |
|---|---|
list-messages |
List messages in a mailbox (all mailboxes if omitted) |
search-messages |
Find messages by sender or subject (query), or by body text (body, IMAP backend) |
get-message |
Read the full content of a message |
get-message-headers |
Read a message's raw RFC 5322 headers (author's Date:, Message-ID, threading ids, Received: trace) without the body |
get-message-rfc822 |
Acquire the complete original RFC 822 bytes over IMAP — untouched, with uid/uidValidity/internalDate/flags/RFC822.SIZE and a SHA-256 — for an archival or forensic .eml (imap: ids only; read-only: EXAMINE + BODY.PEEK[]; inline up to 6 MiB, savePath up to 25 MiB) |
get-thread |
Get the full conversation thread for a message |
send-email |
Send a new email immediately (attachments; inReplyTo/references threading, SMTP only) |
send-serial-email |
Send personalized copies to many recipients (mail merge with {{Key}} placeholders) |
create-draft |
Save an email to Drafts for review (attachments; with inReplyTo/references a threaded draft is filed over IMAP) |
reply-to-message |
Reply to a message (replyAll, send, transport, attachments) |
forward-message |
Forward a message to new recipients (body, send, transport, attachments) |
mark-as-read |
Mark a message as read |
mark-as-unread |
Mark a message as unread |
flag-message |
Flag a message for follow-up (optional color) |
unflag-message |
Remove flag from a message |
delete-message |
Move a message to Trash |
move-message |
Move a message to a different mailbox |
resolve-message-id |
Convert imap: ids to numeric Mail.app ids for the AppleScript reply/forward path. Direct SMTP replies and forwards accept imap: ids without conversion. Not needed for flag colors: since 2.10.0 flag-message/batch-flag-messages write the color over IMAP directly |
list-attachments |
List a message's attachments (name, MIME type, size) |
save-attachment |
Save an attachment to disk |
fetch-attachment |
Fetch an attachment's bytes inline as base64 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +23 lines 43c963baea6f
- yesterday Changed · +50 lines dbb9eca7ad6e
- 3d ago Changed · +36 lines 15a37936a308
- 22d ago Changed · +11 lines 4a88f816ae7b
- 1mo ago Changed · +4 lines 40d367c58e9b
- 1mo ago Changed · +1 lines db4d351e5b1f
- 1mo ago Changed · +19 lines c57aae5eb668
- 1mo ago First seen · 254 lines · 47 tokens per session scan A 1c800b3e0e0f
apple-mail is a skill published in the GitHub repository sweetrb/apple-mail-mcp (102 stars, last pushed today), licensed MIT. It adds 47 tokens to every session and 4,451 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
confirmation-protocol
Foresay-derived confirmation workflow for email operations. Use this skill BEFORE executing archive-mail with vague filters, composeemail (sending mail), deleteemail/moveemail in bulk, or any operation that touches 5+ emails. Show user a structured preview of "what I understood" before taking action, achieving…
bulk-operation-preview
Show structured preview of bulk email operations (5+ emails) before execute. Group by thread, flag false-positive candidates, count side-effect scope (files written, attachments downloaded, mailboxes touched). Use after email-search-disambiguation finishes Phase 1, as Phase 2 of the confirmation protocol.
email-search-disambiguation
A clarification step for email searches when a person, time period, direction, or scope is unclear. It presents specific possible meanings so the user can choose one.
email-management-expert
Expert email management assistant for Apple Mail. Use this when the user mentions inbox management, email organization, email triage, inbox zero, organizing emails, managing mail folders, email productivity, checking emails, or email workflow optimization. Provides intelligent workflows and best practices for…
apple-notes
Manage Apple Notes via memo CLI: create, search, edit.
apple-notes
Use this skill when the user wants to interact with Apple Notes on macOS - creating, searching, reading, updating, deleting, organizing, or formatting notes and folders. This skill provides access to Apple Notes through MCP tools and includes safe formatting guidance.