55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill appears to implement an AgentMail client and webhook helpers (coherent with its description) but the metadata omits required credentials and config-paths, and the runtime instructions tell y...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773395151957,
        "_id": "k97eznt9jg6mkc7hnmge9r9e0582vg5j",
        "changelog": "- Initial public release of AgentMail.\n- Provides API-first email platform for agents: programmatic inbox creation, sending\/receiving, and real-time webhooks.\n- Includes security guidance and webhook allowlist example to prevent prompt injection risks.\n- Supports custom domains and high-volume sending without rate limits.\n- Added example scripts for sending email, checking inbox, and setting up webhooks.\n- Documentation references for detailed API, webhook, and usage examples included.",
        "changelogSource": "auto",
        "createdAt": 1773395151957,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Liguang00806",
        "handle": "liguang00806",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/185917662?v=4",
        "kind": "user",
        "linkedUserId": "kn7dz1dbbpne247tx6794qjct1825rf1"
    },
    "ownerHandle": "liguang00806",
    "skill": {
        "_creationTime": 1773395151957,
        "_id": "kd70jqszbhwbmfb1c4fdxs5dpd82vppr",
        "badges": [],
        "canonicalSkillId": "kd70nngfsaftpxymdjhhs6wwjh7zwym5",
        "createdAt": 1773395151957,
        "displayName": "Agentmail Temp",
        "forkOf": {
            "at": 1773395151957,
            "kind": "fork",
            "skillId": "kd70nngfsaftpxymdjhhs6wwjh7zwym5",
            "version": "1.1.1"
        },
        "latestVersionId": "k97eznt9jg6mkc7hnmge9r9e0582vg5j",
        "ownerUserId": "kn7dz1dbbpne247tx6794qjct1825rf1",
        "slug": "agentmail-temp",
        "stats": {
            "comments": 0,
            "downloads": 120,
            "installsAllTime": 1,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "API-first email platform designed for AI agents. Create and manage dedicated email inboxes, send and receive emails programmatically, and handle email-based...",
        "tags": {
            "latest": "k97eznt9jg6mkc7hnmge9r9e0582vg5j"
        },
        "updatedAt": 1774333019786
    }
}