ClawHub

Ztpc Spam Sweep

Security checks across malware telemetry and agentic risk

Overview

The skill has a legitimate spam-cleanup purpose, but it bundles and uses mailbox credentials and can change an enterprise mailbox by default.

Review before installing. Remove the bundled secrets.json, rotate the exposed mailbox password, use a secure secret store or tightly permissioned local file, require HTTPS before login, prefer dry_run=true until rules are validated, and use a dedicated browser profile so mailbox sessions are contained.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The skill explicitly instructs the agent to read mailbox credentials from a local secrets.json file, but it does not require any user-facing disclosure or runtime confirmation that credentials will be accessed and used for login. In an agentic environment, silent credential use is a meaningful security and privacy risk because it enables account access without clear, contextual consent each time the skill runs.

Credential Access

High
Category
Privilege Escalation
Content
---

## Required files
### 1) secrets.json (required)
Path:
`~/.openclaw/workspace/skills/ztpc-spam-sweep/secrets.json`
Confidence
95% confidence
Finding
secrets.json

Credential Access

High
Category
Privilege Escalation
Content
## Procedure (browser automation)
### Step 0: Setup
- Read `secrets.json`.
- Load allowlist/blocklist if present.

### Step 1: Open and login
Confidence
96% confidence
Finding
secrets.json

Credential Access

High
Category
Privilege Escalation
Content
- If the UI shows mailbox main layout (folders like 收件箱/未读邮件/垃圾邮件 etc) => logged in.
   - Else, if login iframe/panel is visible => proceed to login.
4. Login (if needed):
   - Fill username + password from `secrets.json`.
   - Click 登录.
   - If login fails with “用户名或密码错误” => STOP and report:
     `状态：登录失败（账号或密码错误）`
Confidence
97% confidence
Finding
secrets.json

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal