agentmail is an AI agent skill, created by adboio and published at openclaw/skills. ClawSecure audited agentmail across 8 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 13 findings concentrate in Data Exfiltration, Code Injection and Prompt Injection, including Pattern detected: base64.b64encode and Detects prompt strings used to override or force malicious tool calls:.... 8 were rated high or critical severity.
Is agentmail safe?
ClawSecure audited agentmail and assigned a security score of 0/100 (High Risk), identifying 13 findings across Data Exfiltration and Code Injection. Review the findings below before installing.
What did ClawSecure find in agentmail?
ClawSecure identified 13 findings in agentmail, concentrated in Data Exfiltration, Code Injection and Prompt Injection. 8 were rated high or critical severity. The most severe include Pattern detected: base64.b64encode and Detects prompt strings used to override or force malicious tool calls:....
How was agentmail audited?
ClawSecure ran agentmail through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 8 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned agentmail a security score of 0/100, placing it in the High Risk range. This is driven by 13 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for agentmail
ClawSecure detected 13 security findings in agentmail, spanning Data Exfiltration, Code Injection, Prompt Injection and Policy Violation.
- critical · Pattern detected: base64.b64encode. Data Exfiltration finding detected in
scripts/send_email.py:75. - critical · Detects prompt strings used to override or force malicious tool calls:.... Prompt Injection finding detected in
SKILL.md:84. - high · Pattern detected: Ignore previous instructions. Prompt Injection finding detected in
SKILL.md:84. - high · Pattern detected: while True:. Resource Abuse finding detected in
scripts/check_inbox.py:98. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
SKILL.md. - high · Potentially dangerous code pattern detected: system\(. Code Injection finding detected in
EXAMPLES.md. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
EXAMPLES.md. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
WEBHOOKS.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/a04233dba000ad08/scripts/send_email.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/a04233dba000ad08/scripts/check_inbox.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/a04233dba000ad08/scripts/setup_webhook.py. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
Showing the 12 highest-severity of 13 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for agentmail
Audit external network connections
Eliminate dynamic code execution
Investigate prompt injection vectors
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. agentmail is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.