ClawHub
Back to skill

Security audit

邮件技能免费版

Security checks across malware telemetry and agentic risk

Overview

This email skill is mostly coherent, but it asks users to store SMTP passwords in a local config file and can send messages or attachments externally without clear confirmation safeguards.

Review before installing. Only use this skill for deliberate email-sending tasks, confirm recipient/body/attachment before any send, and avoid placing real SMTP passwords in project directories or shared workspaces unless you can protect the file permissions and keep it out of version control.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The skill metadata and introductory guidance describe broad email-related capability without clearly constraining when the agent should or should not activate it. In an agent environment with exec/write access, vague invocation criteria can cause over-triggering for loosely related user requests, leading to unintended email preparation or transmission of sensitive data.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The usage flow says the agent should execute the skill whenever the user describes a task and references the skill's capabilities, but it does not require tight preconditions or confirmation. This increases the risk of the agent invoking an external-email workflow prematurely, exposing recipient data, message content, or attachments to third-party SMTP services.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explains SMTP sending features but does not prominently warn that email bodies, recipient addresses, attachments, and authentication data will be transmitted to external mail infrastructure. Users may unknowingly cause sensitive content to leave the local environment, which is especially risky in an agent context that can read files and execute commands.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill instructs users to place SMTP credentials, including a password, in a local JSON configuration file without a strong warning about plaintext secret storage. This can lead to credential leakage through source control, backups, logs, shared workspaces, or other agent-accessible files, enabling unauthorized email access and impersonation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.