ClawHub
Back to skill

Security audit

agentmail-cli

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward AgentMail CLI guide whose main risks are normal email-account risks: API-key handling, sending mail, reading mail, and deleting inboxes or message threads.

Install only if you are comfortable giving the agent an AgentMail API key and allowing it to send, read, and delete AgentMail mail resources. Prefer task-scoped AGENTMAIL_API_KEY use on shared machines, protect or remove ~/.agentmail/config.json if using persistent setup, and require explicit approval before deleting inboxes or messages.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill documents destructive delete operations for inboxes and messages without any warning, confirmation, or pre-delete verification guidance. In an agent context, this increases the chance of accidental irreversible data loss, especially because an autonomous system may execute documented commands directly.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The note that deleting a message removes the entire thread appears later in the document rather than as a prominent warning at the delete command itself. This separation makes it likely that an agent or user will invoke deletion assuming it affects only one message, causing broader unintended loss of communications.

Session Persistence

Medium
Category
Rogue Agent
Content
---
name: agentmail-cli
description: Manage email inboxes and messages via AgentMail API. Create disposable inboxes, send/receive emails, and list messages. Use when the agent needs to send or receive email, create temporary inboxes, or check for incoming messages.
metadata: {"openclaw":{"emoji":"📧","requires":{"bins":["agentmail"],"env":["AGENTMAIL_API_KEY"]},"primaryEnv":"AGENTMAIL_API_KEY","install":[{"id":"npm","kind":"node","package":"@stepandel/agentmail-cli","bins":["agentmail"],"label":"Install agentmail-cli via npm"}]}}
homepage: https://github.com/stepandel/agentmail-cli
---
Confidence
85% confidence
Finding
Create disposable inboxes, send/receive emails, and list messages. Use when the agent needs to send or receive email, create temporary inboxes, or check for incoming messages. metadata: {"openclaw":{"

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.