QQ Mail

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward QQ Mail helper that reads and sends mail using disclosed QQ credentials, with normal email-attachment risks users should control.

Install only if you want an agent to access your QQ mailbox. Keep QQMAIL_AUTH_CODE private, revoke it when no longer needed, and require explicit confirmation of recipient, subject, body, and every attachment path before sending email.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill supports sending emails and attachments to external QQ Mail servers but does not prominently warn that user-provided content, recipient addresses, and attached files will leave the local environment. In a mail-management skill this behavior is expected, but the lack of explicit disclosure still increases the chance of users unknowingly transmitting sensitive data to third-party infrastructure.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal