ClawHub
Back to skill

Security audit

Himalaya

Security checks across malware telemetry and agentic risk

Overview

This is a normal email CLI helper, but it can access and change mail in configured accounts, so credentials and destructive email actions need care.

Install this only if you want an agent to operate a configured email account through Himalaya. Prefer app passwords, OAuth, `pass`, or a system keyring instead of `auth.raw`; protect the config file; and require explicit approval before sending, reply-all, forwarding, deleting, moving, exporting full messages, or downloading attachments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The example includes a raw password directly in the configuration file, which can lead users to store mail credentials in plaintext under their home directory. If the file is exposed through backups, local compromise, screenshots, dotfile sync, or accidental sharing, attackers can obtain email account access.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The SMTP example likewise shows a raw password in configuration, normalizing insecure secret storage for sending credentials. Exposure of this file can grant attackers the ability to authenticate to the mail service, send mail as the user, and potentially pivot through password reuse or mailbox-based account recovery.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.