ClawHub
Back to skill

Security audit

163 Email Skill - SMTP Sender

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow 163 SMTP email-sending skill, but users should understand it uses their mail credentials and sends message content through the configured SMTP service.

Install only if you intend to let the agent send real emails from the configured account. Treat recipients, subjects, and message bodies as data sent to the SMTP provider, avoid sending secrets or regulated data unless approved, and use a dedicated SMTP authorization code rather than a primary account password.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file documents a skill that sends email through 163 SMTP and instructs users to provide account credentials, which can affect privacy and involve external data transmission. Under the markdown-file criteria for missing user warnings, the description should explicitly warn users that email content and configured credentials will be used to send data through a third-party mail service.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding

The skill declares required environment variables but does not define an explicit tool scope such as permissions or allowed-tools. This weakens least-privilege controls and makes the skill's access expectations less transparent, increasing the chance that an agent runtime exposes sensitive environment data more broadly than intended.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The documentation describes sending email through an external SMTP provider but does not clearly warn users that recipient addresses, subject lines, and message bodies will be transmitted to a third-party service. This can lead to unintentional disclosure of sensitive or regulated data if users assume processing is local or fail to assess privacy implications.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest exposes an email-sending capability that accepts arbitrary recipient, subject, and content fields, but it does not warn that these user-supplied values will be transmitted to an external SMTP provider. This creates a transparency and data-handling risk: users or higher-level agents may provide sensitive information without realizing it leaves the local environment and is sent to third-party infrastructure.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This code file performs a network-like external action by sending email, which transmits user-provided content and recipient data, but it includes no confirmation prompt or user-facing disclosure beyond a brief setup note. The comments describe the action, but they do not warn about the privacy or external-delivery implications of sending email.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.