Recipe Save Email Attachments

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: recipe-save-email-attachments Version: 1.0.12 The skill bundle is a standard recipe for automating the transfer of Gmail attachments to Google Drive using the 'gws' tool. The instructions in SKILL.md are transparent, align with the stated purpose, and do not contain any indicators of malicious intent, data exfiltration, or prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Attachments could be copied from Gmail into an unintended Drive folder if the query, message ID, attachment ID, or folder ID is wrong.

Why it was flagged

The recipe exposes commands that read Gmail messages, download attachments, and upload files to Drive. This is expected for the stated purpose, but it can move sensitive data if run with a broad query or wrong folder.

Skill content

Search for emails with attachments: `gws gmail users messages list ...`; Download attachment: `gws gmail users messages attachments get ...`; Upload to Drive folder: `gws drive +upload --file ./attachment.pdf --parent FOLDER_ID`

Recommendation

Run the commands only after confirming the Gmail search filter and Drive folder, and check whether the destination folder is shared.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The tool may be able to read Gmail content and write files to Google Drive under the authenticated Google account.

Why it was flagged

The recipe relies on Gmail and Drive integrations, implying delegated Google account access. That is purpose-aligned, but users should understand which account and scopes are being used.

Skill content

requires:
      skills:
        - gws-gmail
        - gws-drive

Recommendation

Use a trusted Google account, grant only necessary permissions where possible, and revoke access when you no longer need the recipe.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The safety of execution depends partly on the installed gws binary and companion skills.

Why it was flagged

The provided skill is instruction-only, so the actual Gmail and Drive operations depend on external gws tooling and skills that were not included in this scan.

Skill content

requires:
      bins:
        - gws
      skills:
        - gws-gmail
        - gws-drive

Recommendation

Install gws, gws-gmail, and gws-drive only from trusted sources and review their permissions separately.