ClawHub
Back to skill

Security audit

Mermail GTM Agent

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Mermail outbound-email workflow that requires user approval before sending or other external actions.

Install this only if you want the agent to access a Mermail mailbox for outreach and reply handling. Review send previews carefully, keep Apollo optional unless needed, and verify any triager configuration remains draft-only.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
---
name: mermail-gtm-agent
description: Run outbound GTM email, classify replies, and draft warm-acks through a Mermail mailbox. Use when the job is personalized outreach, reply classification, unsubscribe handling, or a draft-only outbound workflow. Optional Apollo research stays in Composio; all sends stay in Mermail. Do not use for calendar booking, support tickets, Gmail/Outlook Composio, or auto-sending without approval.
metadata:
  openclaw:
    requires:
Confidence
75% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

No suspicious patterns detected.