Security audit

email-skill

Security checks across malware telemetry and agentic risk

Overview

This email skill does what it says, but it includes a live shared SMTP credential and can send arbitrary email without clear per-send confirmation safeguards.

Install only if you own or are explicitly authorized to use the listed SMTP account. Replace the embedded credential with your own securely managed secret, rotate the exposed code, and require explicit review of sender, recipient, subject, and body before any email is sent.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill instructs the agent to transmit arbitrary user-provided content to an external SMTP service but does not require consent, disclosure, or data-minimization safeguards. In context, this is more dangerous because the same document also embeds live credentials and a fixed external account, making outbound exfiltration easy and operationally ready with no additional setup.

Natural-Language Policy Violations

Low

Confidence: 98% confidence
Finding: The skill hard-codes a real SMTP provider, mailbox, and live client authorization code, enabling anyone with access to the file to send mail as that account. The fixed default service selection is not just a policy concern here; in this context it materially increases abuse risk by providing ready-to-use external communication infrastructure and embedded secrets.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.