Ztpc Spam Sweep

• Analyzed: May 12, 2026, 4:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: cd508d059f0f8623805124383707d962024c152b79575ec0c9540278156fbed5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'ztpc-spam-sweep' is designed to access a specific enterprise email system (http://mail.ztpc.com/) using a persistent browser profile, scan unread emails, and mark identified spam/phishing messages. The `SKILL.md` explicitly includes 'HARD RULES' that prohibit outputting credentials or sensitive data, limit actions to marking as spam (never deleting), and define strict output formats. It requires `secrets.json` for login but instructs the agent to handle these securely. The skill's purpose and implementation details are clearly aligned with a legitimate email management task, with no evidence of malicious intent or instructions for unauthorized data exfiltration, persistence, or arbitrary code execution.