ClawHub
Back to skill

Security audit

BotEmail.ai - Free bot email

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent bot-email integration, but it needs review because it handles verification codes and API keys while documenting destructive inbox actions and an unsafe dashboard URL pattern.

Install only if you are comfortable sending bot inbox contents, verification emails, and codes to BotEmail.ai. Treat the returned API key like a password, avoid sharing dashboard URLs that contain keys, do not use this for high-value or regulated accounts, and require explicit confirmation before deleting messages or clearing an inbox. Use the optional MCP server only from a pinned, reviewed commit in an isolated environment.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T09 · Insecure Skill Coding Practices

Warning
Location
EXAMPLES.md:354
Finding

Inbox API Key Exposed in a Dashboard URL Query String

Content
View full analysis
Remediation
View remediation

T08 · Insecure Dependencies

Warning
Location
README.md:164
Finding

Optional MCP Installation Uses an Unpinned Remote Repository and Dependency Graph

Content
View full analysis
Remediation
View remediation
npm ci --ignore-scripts ``` ]]>

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (38)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
85% confidence
Finding

The documented delete-by-ID endpoint exposes a destructive capability over a user-controlled parameter without any stated confirmation, authorization scoping, or safety constraints beyond possession of the API key. In an agent workflow, this creates a realistic risk that prompt confusion, bad tool routing, or malicious instruction could cause deletion of messages that may contain important verification or audit information.

Content

Scanner excerpt · SKILL.md (reported line 80)May include surrounding context.

md
### GET /api/emails/{email}/{id}
Get a single email by ID.

### DELETE /api/emails/{email}/{id}
Delete a specific email.

### DELETE /api/emails/{email}

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
91% confidence
Finding

The clear-entire-inbox endpoint is especially dangerous because a single request can irreversibly remove all stored messages, including verification codes, testing evidence, and notifications. In this skill context, where inboxes are used for automated workflows and authentication-related emails, accidental or manipulated invocation could disrupt accounts and destroy useful records at scale.

Content

Scanner excerpt · SKILL.md (reported line 83)May include surrounding context.

md
### DELETE /api/emails/{email}/{id}
Delete a specific email.

### DELETE /api/emails/{email}
Clear entire inbox.

---

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 11)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 11)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 34)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 59)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 77)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 132)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 172)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 230)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 251)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 263)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 301)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 325)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 346)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 48)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 55)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 17)May include surrounding context.

bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · skill.json (reported line 53)May include surrounding context.

json
```bash
# Create random bot email (no username needed)
curl -X POST https://api.botemail.ai/api/create-account \
  -H "Content-Type: application/json" \
  -d '{}'
```

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The examples display an API key and later demonstrate extracting verification codes, but the surrounding documentation does not prominently warn that these values grant mailbox access and can expose account verification flows. In agent or demo contexts, readers may copy logging patterns or share outputs, leading to credential leakage and unauthorized inbox access.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 59)May include surrounding context.

javascript
async function autoVerifyEmail(serviceName) {
  // 1. Create bot email
  const accountResponse = await fetch('https://api.botemail.ai/api/create-account', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({})

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 132)May include surrounding context.

javascript
async function autoVerifyEmail(serviceName) {
  // 1. Create bot email
  const accountResponse = await fetch('https://api.botemail.ai/api/create-account', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({})

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 325)May include surrounding context.

javascript
async function autoVerifyEmail(serviceName) {
  // 1. Create bot email
  const accountResponse = await fetch('https://api.botemail.ai/api/create-account', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({})

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The cleanup example performs permanent deletion of emails but does not clearly warn that the action is destructive and irreversible. Users may run it as-is against active inboxes and unintentionally destroy messages, including evidence, verification emails, or operational data.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · EXAMPLES.md (reported line 301)May include surrounding context.

md
});

// 2. Register webhook with BotEmail.ai
await fetch('https://api.botemail.ai/api/webhook/register', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',

Static analysis

No suspicious patterns detected.