ClawHub
Back to skill

Security audit

Domain Email Forwarding

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent manual guide for domain email forwarding, but it explicitly encourages catch-all routing and account recovery workflows that can expose sensitive reset codes and mail beyond a narrowly authorized use.

Install only if you administer the domain and will use it for accounts you are authorized to access. Prefer forwarding a specific known address, avoid catch-all unless truly necessary, disable it after the task if it is temporary, and consider that forwarded mail may include private or security-sensitive messages for other addresses at the domain.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Ssd 4

Medium
Confidence
95% confidence
Finding
The skill explicitly frames email forwarding as a way to receive verification codes, password resets, and recovery emails for accounts tied to a dormant domain, which operationalizes account recovery through control of domain mail flow. Even if limited to domains the user owns, this directly facilitates interception of sensitive authentication messages and normalizes a workflow that can be abused for account takeover or unauthorized access when ownership/authorization is unclear.

Ssd 3

Medium
Confidence
93% confidence
Finding
The skill recommends catch-all forwarding to route all mail for a domain to a single inbox, including unknown addresses that may receive recovery links, OTPs, invoices, and other sensitive content. This broad interception materially increases exposure of private communications and creates a convenient mechanism for collecting security-relevant messages far beyond a narrowly scoped administrative need.

Static analysis

No suspicious patterns detected.