ClawHub
Back to skill

Security audit

Custom Mail

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Docker-based mail console, but users should understand that sent email content and attachments go to the configured mail provider.

Before installing, confirm you trust the Docker image or GitHub repository, use a strong ADMIN_PASSWORD, and treat any sent messages and attachments as data shared with the configured mail provider. Consider binding the service only where you intend it to be reachable.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly promotes sending email through third-party providers and handling attachments, but it does not clearly warn users that message bodies, recipient data, and attached files will leave the local Docker environment and be transmitted to external services. This can mislead users into assuming the workflow is private because the console runs locally, increasing the risk of accidental disclosure of sensitive content.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:84