Back to skill
Skillv1.0.0
VirusTotal security
126 Mail Cleanup · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 6, 2026, 10:51 PM
- Hash
- 85e533416ce6f7e86604efe41bbb183e8c0198f7af5e882d7438922733ab5ff4
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: 126mail-cleanup Version: 1.0.0 The skill manages sensitive NetEase (126.com) email credentials and performs destructive operations, including bulk deletion and server-side attachment stripping. While SKILL.md includes safety instructions like staging folders and local backups, the requirement for the MAIL126_AUTH_CODE and the broad use of Bash and Python to manipulate mailbox data via IMAP constitute high-risk capabilities. No explicit evidence of data exfiltration was found, but the level of access to personal communications and the future-dated timestamp in _meta.json (April 2026) warrant a cautious classification.
- External report
- View on VirusTotal