Email Mail Master Rose

• Analyzed: Mar 26, 2026, 6:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0a8645b99dab18c9e558613bf260d07e559bd6e21aa4d51f26e681565f7c8073
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded, plaintext email credentials (email addresses and SMTP/IMAP authorization codes) for multiple accounts (e.g., [e-mail], [e-mail]) within the `scripts/config.json` file. While the core logic in `scripts/email_manager.py` and `scripts/mail.py` appears to be a legitimate email client implementation, the distribution of active credentials instead of placeholders is a high-risk practice that could lead to unauthorized access or monitoring if not replaced by the user as instructed in `SKILL.md`.