Ai Inbox Attachment Finder

PassAudited by ClawScan on May 13, 2026.

Overview

This is a document-only prompt skill that helps users create privacy-aware search queries and logs for finding attachments, with no code, network access, credentials, or direct inbox access shown.

This appears safe to install for query-building help. Use it by sharing only the minimum metadata needed, prefer placeholders for sensitive details, and run any inbox/chat searches yourself in your own apps.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you provide exact senders, subjects, dates, confirmation codes, or file names, those details may appear in the chat and generated log.

Why it was flagged

The skill can place email/chat metadata, file names, dates, senders, and safe descriptions into the conversation or generated log. That can still reveal private context, but the instructions explicitly limit collection to metadata, allow placeholders, and require redaction/user confirmation.

Skill content
Ask for metadata, not private content ... likely sender ... approximate date range ... likely subject words ... confirmation codes if safe to share ... Give the user a metadata-only log template
Recommendation

Use placeholders or redactions for sensitive terms, and do not paste private document contents, passwords, one-time codes, or account secrets.