ClawHub
Back to skill

Security audit

SentVia Email

Security checks across malware telemetry and agentic risk

Overview

This skill is a real email integration, but it needs review because it can create a live inbox and send, reply, forward, or block email without explicit user-confirmation safeguards.

Install only if you want the agent to operate a real SentVia email address. Before use, require the agent to show recipients, message text, forwarding targets, and sender-blocking changes for approval, and do not allow it to email secrets, credentials, private workspace data, or unreviewed content.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
77% confidence
Finding
The skill is described broadly as giving the agent its own email address and enabling inbox creation, sending, replying, searching, and sender management, but it does not define narrow activation boundaries or require explicit user confirmation before performing high-impact actions. In practice, this can cause an agent to invoke the skill in contexts where the user did not intend real-world email actions, increasing the risk of unintended external communication.

Missing User Warnings

High
Confidence
94% confidence
Finding
The skill explicitly enables sending and receiving real email and creating live inboxes, but it does not present a clear upfront warning to the user that actions have real external effects. This omission is dangerous because an agent may send messages, create identities, or interact with external parties without the operator appreciating the real-world consequences.

External Transmission

Medium
Category
Data Exfiltration
Content
tools (`create_inbox`, `send_message`, `reply_to_message`, `search_messages`, …)
over raw HTTP. To set it up:
`openclaw mcp add sentvia --command npx --arg -y --arg sentvia-mcp` and put
`SENTVIA_API_KEY` in that server's `env`. Otherwise use curl as below.

## Your address
Confidence
90% confidence
Finding
curl as below. ## Your address Create one inbox for yourself once, then reuse it. Check first: ```bash curl -s https://api.sentvia.ai/v1/inboxes -H "Authorization: Bearer $SENTVIA_API_KEY" ``` If

External Transmission

Medium
Category
Data Exfiltration
Content
---

You can send and receive real email through SentVia. Your API key is in
`SENTVIA_API_KEY`; all requests go to `https://api.sentvia.ai/v1` with
`Authorization: Bearer $SENTVIA_API_KEY` and JSON bodies.

If the SentVia MCP server is configured (`sentvia` in `mcp.servers`), prefer its
Confidence
87% confidence
Finding
https://api.sentvia.ai/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.