Imap Idle Review

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 1.4.0
• Hash: 893b3e2e92b74bfa536c1f9c2c87d2d8b42a899eb018d2278bd678e2984d2912
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'imap-idle' is designed for event-driven email monitoring using IMAP IDLE and OpenClaw webhooks. The code (`scripts/listener.py`, `scripts/setup.py`) and documentation (`SKILL.md`, `README.md`, `SECURITY.md`) align with its stated purpose. It handles IMAP credentials, prioritizing secure storage via `keyring` and defaulting to a local OpenClaw webhook. The `SECURITY.md` is exceptionally thorough, transparently addressing potential security concerns (e.g., VirusTotal flags) and providing best practices for deployment and credential management. While `scripts/listener_old.py` contains hardcoded, personalized values and Russian text, `CHANGELOG.md` confirms these were removed in the current `1.4.0` version, indicating a cleanup of prior iterations rather than malicious intent. No evidence of data exfiltration to unauthorized endpoints, backdoors, obfuscation, or prompt injection against the AI agent was found.