ClawHub
Back to skill

Security audit

goverment bidding email

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed procurement-report email tool, but it sends real emails with attachments and needs careful configuration.

Install only if you intend this skill to send real procurement reports by email. Use a dedicated SMTP account or app password, verify EMAIL_TO and EMAIL_CC before running, invoke it with /govb-email rather than broad natural-language requests, and run it from a trusted directory so an unintended .env file cannot override the mail settings. Review the separate govb-fetcher dependency before relying on the full workflow.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The documentation explicitly states that the tool sends emails via SMTP and attaches files from a local workspace, but it does not prominently warn that running the skill will transmit potentially sensitive procurement data to external recipients. In an agent/skill context, insufficient disclosure of outbound data transfer can cause unintended exfiltration because users may invoke the tool without understanding that local data and fetched report contents will be emailed automatically.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger phrases are broad everyday language such as '发送邮件' and '推送报告', which can collide with normal user requests unrelated to this specialized government procurement workflow. That raises the risk of accidental invocation, causing unintended email sending or data processing with configured SMTP credentials and recipients.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The description explains usage but does not prominently warn that activation will send real emails using stored SMTP credentials and preconfigured recipients. Without a clear warning, users may invoke the skill thinking it is a report-generation tool only, which can lead to unintended outbound communication and disclosure of business data.

Credential Access

High
Category
Privilege Escalation
Content
"""
    # 按优先级查找：当前工作目录 → ~/.config/govb-email/
    candidates = [
        Path.cwd() / '.env',
        Path.home() / '.config' / 'govb-email' / '.env',
    ]
    env_path = next((p for p in candidates if p.exists()), None)
Confidence
76% confidence
Finding
Searching Path.cwd() first for a .env file can let an attacker influence configuration if the skill runs in an attacker-controlled or untrusted working directory. In that case, SMTP host, recipients, and credentials could be replaced, causing misdelivery, credential misuse, or mail routing through attacker infrastructure.

Static analysis

No suspicious patterns detected.