Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Agent Email

v1.0.0

Enables sending outbound emails via AgentMail.to for system alerts and task completion reports using thundarr@agentmail.to.

0· 89·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zrslu01/agent-email.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Agent Email" (zrslu01/agent-email) from ClawHub.
Skill page: https://clawhub.ai/zrslu01/agent-email
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install agent-email

ClawHub CLI

Package manager switcher

npx clawhub@latest install agent-email
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md describes sending outbound email via AgentMail and says a valid AgentMail API key is required, but the skill metadata lists no required environment variables or primary credential. The README also references a send_mail.py tool that is not present in the package. These inconsistencies mean the declared purpose does not match the provided artifacts.
!
Instruction Scope
Instructions ask the agent to perform outbound communication and mention system alerts (e.g., system temperature) but are vague about how to collect that system data and how the API key should be supplied or stored. The guide references running a Python script that is not included; that ambiguity could cause the agent to attempt to create, download, or request credentials unexpectedly.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. That lowers installation risk, but does not resolve the metadata/instruction mismatches.
!
Credentials
SKILL.md explicitly requires an AgentMail API key (a secret), yet the skill metadata does not declare any required environment variables or primary credential. Requiring a secret without declaring it is disproportionate and opaque—users won't know what to provide or how it will be stored/used.
Persistence & Privilege
The skill is not marked always:true and uses default autonomous invocation behavior. It does not request persistent system-wide configuration or modify other skills according to the provided metadata.
What to consider before installing
Do not install or enable this skill until the author fixes the mismatches. Ask the publisher to: (1) declare the exact environment variable name(s) for the AgentMail API key in the skill metadata, (2) include the send_mail.py source (or a trusted install specification) so you can review its behavior, and (3) explain exactly what system data the skill will read (e.g., temperature sensors, logs) and how credentials will be stored. If you must use it before those clarifications, limit the agent's ability to run autonomously and do not provide high-privilege or long-lived credentials—prefer a dedicated, scoped API key that can be revoked quickly. Verify AgentMail.to is a legitimate service and that sending from thundarr@agentmail.to is authorized.

Like a lobster shell, security has layers — review code before you run it.

latestvk978ah5ag32gm79xy4aee8bsf983z4tz
89downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Agent Email Skill

Description

Enables Thundarr to perform outbound communication via the AgentMail.to API. This is the primary notification channel for system health and task completion reports.

Configuration

Requires a valid AgentMail API key. Sends from the official identity: thundarr@agentmail.to.

Tools

  • send_mail.py: A Python script that handles POST requests to the AgentMail v1 API.

Usage Examples

  • "Send a backup success report to my personal email."
  • "Alert me if the system temperature exceeds 80 degrees Celsius."

Comments

Loading comments...