Outlook To Gmail

• Analyzed: May 12, 2026, 4:14 AM
• Findings: 0
• Version: 1.2.0
• Hash: dbf4348b9baadfa9eb886d20f08b8869bc76aa5f8c108533afe6552752ddb82d
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: outlook-to-gmail Version: 1.2.0 The skill bundle is primarily documentation and a utility script for email migration. The `SKILL.md` provides detailed, benign instructions for an AI agent or human operator. However, the `scripts/pre-migration-audit.sh` file is a shell script that takes a domain as input and directly interpolates it into `dig` commands. While `dig` itself is somewhat resilient to simple command injection, this direct interpolation of unsanitized user input into a shell command represents a shell injection vulnerability, which could potentially be exploited if the agent passes untrusted input to the script. This is a vulnerability, not clear malicious intent, thus classifying it as suspicious.