Back to skill
Skillv1.2.0
VirusTotal security
Email Sender (繁體中文版) · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:28 AM
- Hash
- 8b08177b51fa972b32310e8afaece06212815a5ee70e7042d355fa63f13f1029
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: email-sender-tw Version: 1.2.0 The skill is a legitimate email sending and template management tool. It uses the macOS Keychain (`security` command) to safely store and retrieve SMTP credentials, which is a security best practice compared to plain-text storage. The code in `scripts/config.py`, `scripts/send_email.py`, and `scripts/template_manager.py` is well-structured, follows the stated purpose, and uses safe `subprocess` calls with argument lists to prevent shell injection. While it includes a default email address in `scripts/smtp_config.json`, there is no evidence of intentional data exfiltration, malicious execution, or prompt injection.
- External report
- View on VirusTotal