ClawHub
Back to skill

Security audit

Outlook Api

Security checks across malware telemetry and agentic risk

Overview

This Outlook skill is a clear Microsoft Graph integration, but users should be careful because it can send and delete Outlook data when authorized.

Install only if you intend to let an agent use your authorized Outlook account through Maton. Be especially careful with requests that send mail, delete messages or folders, delete calendar events, or modify contacts; ask the agent to show recipients, content, target items, and account connection before taking those actions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill documents destructive Outlook actions such as deleting mail folders and messages without any user-facing warning, confirmation requirement, or note about irreversibility. In an agent setting, this increases the risk that an LLM or user triggers data loss actions without appreciating the consequences.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill exposes email-sending capabilities but does not clearly warn that user-provided content can be transmitted to external recipients. In an agentic context, that omission can lead to unintended disclosure of sensitive data or accidental outbound communications.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_resource_identifier

Example code exposes a concrete connection_id instead of a placeholder.

Critical
Code
suspicious.exposed_resource_identifier
Location
SKILL.md:103