ClawHub
Back to skill

Security audit

Mermail MCP

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward setup and troubleshooting guide for connecting a Mermail MCP server, with credential handling that is disclosed and purpose-aligned.

Install this only if you intend to let your MCP client connect to Mermail. Use the narrowest workspace-scoped key available, store it in a secret store or environment variable, and revoke it if it is exposed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
## Setup

1. Create an API key in Mermail workspace settings and copy it once.
2. Store it as `MERMAIL_API_KEY` in the platform's secret environment. Never ask the user to paste it into chat.
3. Configure `https://console.mermail.app/mcp` and map the environment variable to the `x-api-key` header using the platform-specific syntax.
4. Restart or reload the client so its desktop process receives the environment variable.
5. Run `node scripts/check-connection.mjs` from this skill directory, or inspect the server with the client's MCP status command.
Confidence
80% confidence
Finding
Never ask the user

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access, suspicious.exposed_secret_literal

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/check-connection.mjs:4

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
references/platforms.md:6