v1.0.1

Agent Mailbox Light

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:58 AM.

Analysis

This is a coherent local-file mailbox skill; the main caution is that mailbox notes can persist, fan out to other local workspaces, and influence later agent context.

GuidanceThis skill appears safe for its stated purpose if you want local, lightweight coordination between OpenClaw workspaces. Before installing, decide which workspaces should participate, keep MAILBOX_GLOB scoped, avoid putting secrets in mailbox messages, and treat any mailbox content as advisory rather than authoritative instructions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Cascading Failures

SeverityLowConfidenceHighStatusNote

scripts/send-mailbox.sh

MAILBOX_GLOB="${MAILBOX_GLOB:-$HOME/.openclaw/workspace*}" ... for workspace in $MAILBOX_GLOB; do ... file="$inbox/$filename" ... } > "$file"

The send helper fans out one message to every matching local workspace that has a mailbox inbox. This is disclosed and central to the skill, but a mistaken or misleading message can propagate across multiple workspaces.

User impactA single mailbox send can affect several local agent workspaces at once.

RecommendationSet MAILBOX_GLOB narrowly, initialize mailboxes only in workspaces that should receive these notes, and avoid sending broad or ambiguous high-priority messages.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/cleanup-mailbox.sh

archive="$workspace/.agent-mailbox/archive" ... find "$archive" -maxdepth 1 -type f -name '*.md' -mtime +"$days" -delete

The cleanup helper deletes old archived mailbox .md files under the selected workspace. This is scoped to the mailbox archive and aligns with the stated archive policy, but it is still a local file deletion capability.

User impactOld archived mailbox messages can be removed permanently if cleanup is run with the selected workspace and age threshold.

RecommendationRun cleanup only on the intended workspace and choose the retention period deliberately if archived mailbox records matter.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

SKILL.md

Read only enough to determine relevance; Compress relevant mail into a very short working summary; ... Decide whether to ignore, use for this session, or adopt into memory

Mailbox files are intended to become agent context and may sometimes be distilled into longer-lived memory. The artifact also says they are advisory hints, which keeps this purpose-aligned but still worth noticing.

User impactA message written by another local workspace could influence what the agent considers relevant or remembers later.

RecommendationTreat mailbox content as untrusted local context, verify important claims before acting on them, and only adopt durable facts into memory after explicit judgment.