Email Helper
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a straightforward email-drafting helper, with the main caveat that its included code can save email-related data locally.
This skill looks safe for drafting and polishing emails. Before using it with confidential messages, remember that its code includes local saving of email records, so check or delete the related JSON files if you do not want drafts retained.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Saved email drafts or records could remain on the local machine and be available in later sessions or to anyone with access to those files.
The helper can persist email records locally, which may include personal or business email draft content if this save function is used.
SENT_FILE = DATA_DIR / "sent_emails.json" ... sent["emails"].append(email)
Avoid saving highly sensitive drafts unless local retention is acceptable, and periodically review or delete the generated JSON files if privacy matters.
