ClawHub
Back to skill

Security audit

Outlook To Gmail

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Outlook-to-Gmail migration guide with expected DNS and admin steps, but users should tighten the credential and DNS cutover guidance before using it operationally.

Install only if you are authorized to perform the migration. Do not send passwords by email, keep source mailboxes active during rollback period, record existing DNS/MX settings before changes, schedule MX cutover carefully, and run the audit script only for domains you intend to assess.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The user announcement template explicitly suggests sending a temporary password by email, which normalizes insecure credential distribution. If used as written, it can expose initial account credentials to mailbox compromise, forwarding rules, shared inbox access, or interception, especially during a high-risk migration period when users are changing platforms and may be less able to detect abuse.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The instruction to 'Remove ALL existing MX records' is operationally destructive and can interrupt mail flow if performed incorrectly or before Google Workspace is fully verified and ready to receive mail. In a migration skill, users may copy-paste this step without understanding rollback requirements, propagation delays, coexistence constraints, or the risk of message delivery failures during cutover.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal