Security audit
Security checks across malware telemetry and agentic risk
The skill provides the email-agent features it advertises, but its install and update instructions give a remote service too much ongoing control over local agent code.
Install only if you trust LobsterMail with email contents and metadata and are comfortable with a local reusable token. Avoid the pipe-to-shell installer, inspect any downloaded installer or package first, and do not allow daily self-updates unless each update is explicitly reviewed. Avoid using this for MFA, password resets, regulated data, production accounts, or outbound email unless the user has clearly approved the exact workflow.
One-liner — downloads the skill from the edge proxy and saves it to your OpenClaw skills directory: ```bash curl -sL https://api.lobstermail.ai/install | sh ``` Restart OpenClaw (or start a new session). The skill loads automatically.
One-liner — downloads the skill from the edge proxy and saves it to your OpenClaw skills directory: ```bash curl -sL https://api.lobstermail.ai/install | sh ``` Restart OpenClaw (or start a new session). The skill loads automatically.
No VirusTotal findings
