ClawHub
Back to skill

Security audit

Temporary Email

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it uses raw curl commands for a sensitive email API without enough guardrails around deletion, webhooks, or unsafe user-supplied values.

Install only if you trust chat-tempmail.com with the API key and temporary mailbox contents. Treat webhook URLs as sensitive because full future messages may be forwarded there, and require the agent to confirm exact email/message IDs before deletion and to safely encode or validate all user-provided values.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:32
Finding

Shell Command Injection Through Unsafe Template Substitution

Content
View full analysis
", "expiryTime": , "domain": ""}' ``` ```bash curl -s -X DELETE "https://chat-tempmail.com/api/emails/" -H "X-API-Key: $TEMP_EMAIL_API_KEY" ``` ```bash curl -s "https://chat-tempmail.com/api/emails/" -H "X-API-Key: $TEMP_EMAIL_API_KEY" ``` ```bash curl -s "https://chat-tempmail.com/api/emails//" -H "X-API-Key: $TEMP_EMAIL_API_KEY" ``` ```bash curl -s -X DELETE "https://chat-tempmail.com/api/emails//" -H "X-API-Key: $TEMP_EMAIL_API_KEY" ``` ```bash curl -s -X POST https://chat-tempmail.com/api/webhook \ -H "X-API-Key: $TEMP_EMAIL_API_KEY" \ -H "Content-Type: application/json" \ -d '{"url": "", "enabled": true}' ``` ### Technical Analysis The Skill authorizes `Bash(curl *)` and instructs the Agent to replace placeholders with values originating from users or API responses. These values include email prefixes, domains, expiration values, email IDs, message IDs, pagination cursors, and webhook URLs. The instructions do not require: - Strict validation of identifiers or numeric values. - JSON serialization of request-body fields. - URL encoding of path and query parameters. - Rejection of shell metacharacters. - Construction of arguments without shell interpretation. Values placed inside the single-quoted JSON templates can terminate the existing quote if they contain an apostrophe. Values placed inside double-quoted URL templates can introduce shell substitutions such as command substitution if the Agent reproduces them directly when constructing ...[truncated 2165 chars]
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · reference.md (reported line 51)May include surrounding context.

}

text

### DELETE /api/emails/{emailId}

Delete an email.

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
80% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · reference.md (reported line 94)May include surrounding context.

}

text

### DELETE /api/emails/{emailId}/{messageId}

Delete a message.

External Transmission

Medium
Category
Data Exfiltration
Confidence
90% confidence
Finding

This skill is designed to transmit data to an external API via curl, including an API key in headers and potentially mailbox/message data in requests and responses. External transmission is expected for the functionality, but it still represents a real security and privacy risk if users are not clearly informed and if sensitive content is sent unnecessarily.

Content

Scanner excerpt · SKILL.md (reported line 4)May include surrounding context.

md
---
name: temp-email
description: Manage temporary email addresses and messages using the chat-tempmail.com API. Use when the user wants to create disposable emails, check inbox messages, or manage webhooks.
allowed-tools: Bash(curl *), Read
---

# Temporary Email Skill

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill instructs the agent to send an API key and email/message-related data to a third-party service, but it does not warn the user that their credentials and mailbox contents will leave the local environment. This creates a consent and data-handling risk, especially because inbox contents may contain sensitive information and users may not realize they are authorizing external transmission.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill exposes destructive delete operations for emails and messages without any warning or confirmation requirement. This increases the risk of accidental irreversible data loss if the agent misinterprets a request or the user does not understand that deletion is permanent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The webhook documentation describes forwarding full message contents, including plain text and HTML bodies, to an external server but does not warn that enabling the webhook exports potentially sensitive email data off-platform. In a temp-email skill, users may receive verification codes, password reset links, or other confidential messages, so omission of this privacy/security warning can lead to unintentional data disclosure.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.