Security audit

Email Assistant

Security checks for vulnerabilities and agentic risk

Overview

This email skill is high-trust because it can read mailbox data and send confirmed email, but the artifacts disclose and bound those behaviors coherently.

Install only for a mailbox you intend OpenClaw to access. Use an app password or dedicated mailbox when possible, keep EMAIL_SMTP_SEND_ENABLED=false until you are ready to allow real sends, and review the exact draft contents before confirming any SMTP send.

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 93% confidence
Finding: The skill can access environment secrets, read/write files, invoke shell commands, and reach IMAP/SMTP over the network, yet no explicit permission declaration is present. That mismatch is dangerous because it obscures the true trust boundary for a high-risk skill that handles mailbox contents and send capability, making accidental overexposure or unsafe deployment more likely.

Static analysis

Detected: suspicious.dynamic_code_execution, suspicious.exposed_secret_literal

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/test_imap_readonly.py:24

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/test_smtp_send.py:23

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/test_smtp_workflow.py:21

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: references/configuration.md:15