Near Email Skill

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: 943666bebe6dba39861eb46cd6f1eebc0643e01fc3a02f2ddad7901966c0d2a3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'near-email-skill' is designed to send and read blockchain-native emails. The code and documentation clearly outline its purpose, API interactions with `https://api.outlayer.fastnear.com` and the `outlayer.near` NEAR contract, and the use of a `PAYMENT_KEY` credential for the service. The skill explicitly warns users about the public nature of `send_email_plaintext` content on the blockchain. File system access is limited to reading specified files for email attachments, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent beyond legitimate instructions for skill usage. All identified behaviors are aligned with the stated purpose of providing email capabilities.