ClawHub
Back to skill

Security audit

docker-mailbox

Security checks across malware telemetry and agentic risk

Overview

This skill gives an agent controlled access to read, send, and delete mail, and the artifacts disclose the main risks and safeguards clearly.

Install only if you intend to let an agent operate real mail accounts. Configure auth.tokens with long random tokens, keep config.yaml and tunnel credentials private, avoid public exposure unless you add strong access controls, and require confirmation before any delete action because deletion is permanent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Session Persistence

Medium
Category
Rogue Agent
Content
curl -L https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64 -o /tmp/cloudflared
sudo install /tmp/cloudflared /usr/local/bin/cloudflared

# Authenticate and create tunnel
cloudflared tunnel login
cloudflared tunnel create mailbox
Confidence
84% confidence
Finding
The setup instructs users to create a public Cloudflare Tunnel and persist tunnel credentials locally, which exposes a mail-control API to the internet and concentrates trust in a single bearer token. If that token or the stored tunnel credentials are leaked, an attacker could remotely read, send, or delete mail across configured accounts, making the deployment materially more dangerous than a local-only setup.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.