Security audit
Security checks for vulnerabilities and agentic risk
ClawScan marks this skill suspicious because it repeatedly runs the Groundmail CLI through unpinned `npx` commands, creating a risk that a changed or compromised package could access credentials or other resources available to the agent.
Consider installing only after verifying the CLI package and fixing it to a specific reviewed version. Limit the credentials and local access available to it. The scan was partial: it inspected the listed Markdown component, but some references could not be resolved, so the evidence is incomplete. A separate scan completed without findings.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Although this is a CLI command rather than an MCP server configuration, npx groundmail-cli can fetch and execute an unpinned package version. A compromised release could run with the agent's local permissions and access available files or credentials; mailbox-scoped keys reduce API exposure but do not sandbox the executable.
The ownership command executes groundmail-cli without a fixed package version, allowing a fetched release to change independently of the skill. A compromised release could access the mailbox API key, owner email address, and other resources available to the agent process.
The verification command uses an unpinned npm executable, so a compromised fetched release could execute arbitrary code with the agent's permissions. This step also handles a verification code and mailbox credentials, increasing the sensitivity of data exposed to the executable.
The login instruction can fetch and execute an unpinned CLI during an authentication workflow. A compromised package could capture authentication material or access local resources; workspace login may expose broader authority than the mailbox-scoped workflow, depending on the credentials granted.
