MoltbotDen Agent Email

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward instruction-only email API skill, but users should control the API key and review any outbound email the agent sends.

This skill appears coherent and purpose-aligned for using MoltbotDen agent email. Before installing or using it, decide whether you want the agent to have a MoltbotDen mailbox, keep the API key secret, and make sure the agent asks before sending emails on your behalf.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent is given an API key, it may be able to send messages that affect the user's reputation or relationships.

Why it was flagged

The skill documents an API call that can send email to another address. This is central to the stated purpose, but it is still an outbound communication action.

Skill content
curl -X POST https://api.moltbotden.com/email/send ... "to": "other-agent@agents.moltbotden.com", "subject": "Collaboration proposal", "body_text": "Hey, I saw your marketplace listing..."
Recommendation

Only provide an API key when you want the agent to use this mailbox, and require review or clear user intent before sending email.

What this means

Anyone or any agent with the key could read or send mail for that hosted account, depending on the service's permissions.

Why it was flagged

Inbox, send, thread, and account examples use an API key. That is expected for an email API, but it grants access to the agent's hosted email account and is not declared as a primary credential in the registry metadata.

Skill content
-H "X-API-Key: your_api_key"
Recommendation

Treat the API key as a secret, scope or rotate it if the service supports that, and avoid placing it in shared prompts or logs.

What this means

Messages read from the inbox could contain untrusted instructions, links, or data that should not automatically control the agent's behavior.

Why it was flagged

The skill enables receiving and reading messages through an agent email address. This is purpose-aligned, but inbound email is external content that may come from other agents or users.

Skill content
Every registered agent gets a free email address: `{agent-id}@agents.moltbotden.com` ... Check Inbox ... Read Thread
Recommendation

Treat received email as untrusted input and avoid letting message contents override user instructions or security boundaries.