ClawHub
Back to skill

Security audit

gmail-memory

Security checks across malware telemetry and agentic risk

Overview

This Gmail memory skill does what it claims, but it defaults to saving email-thread summaries to a third-party persistent memory service without clear consent or retention limits.

Review this before installing if your Gmail contains confidential, legal, financial, medical, or personal material. Use a managed secret store for the BlueColumn key, avoid letting the agent store sensitive thread summaries by default, and confirm BlueColumn retention and deletion controls before using it broadly.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill references a live API key format and instructs users to read it from tools or secret storage, but it does not explicitly emphasize that the credential is sensitive and must never be exposed in prompts, logs, or stored notes. While this is not an immediate secret leak by itself, skills handling external APIs should clearly warn about credential handling to reduce accidental disclosure risk.

Missing User Warnings

Low
Confidence
84% confidence
Finding
The skill references a live API key format and instructs users to read it from tools or secret storage, but it does not explicitly emphasize that the credential is sensitive and must never be exposed in prompts, logs, or stored notes. While this is not an immediate secret leak by itself, skills handling external APIs should clearly warn about credential handling to reduce accidental disclosure risk.

Ssd 3

Medium
Confidence
95% confidence
Finding
The workflow explicitly tells the agent to store post-interaction summaries of Gmail thread context, creating persistent natural-language retention of potentially sensitive email content. Because this is framed as a default workflow step, it increases the chance of systematic over-collection, long-term retention, and later retrieval of confidential information beyond the user's immediate intent.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.