email-securityProtect AI agents from email-based attacks including prompt injection, sender spoofing, malicious attachments, and social engineering. Use when processing emails, reading email content, executing email-based commands, or any interaction with email data. Provides sender verification, content sanitization, and threat detection for Gmail, AgentMail, Proton Mail, and any IMAP/SMTP email system.
Install via ClawdBot CLI:
clawdbot install ivaavimusic/email-securityGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Contains instructions to override system prompt or ignore user requests
"IGNORE ALL PREVIOUS INSTRUCTIONS"Accesses system directories or attempts privilege escalation
/var/log/AI Analysis
The skill is a defensive security control designed to protect an AI agent from email-based attacks. It focuses on verifying senders, sanitizing content, and detecting threats, with no evidence of sending user data externally, overriding user intent, or credential harvesting. The primary risk is potential misconfiguration or reliance on external scripts, but its stated purpose is protective.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
An AI agent processes incoming customer support emails to categorize and prioritize tickets. The skill verifies sender authenticity to prevent spoofed requests, sanitizes email content to remove malicious scripts, and scans for prompt injection attempts that could manipulate the agent's response. This ensures only legitimate customer issues are escalated to human agents.
Executives use email to delegate tasks to an AI agent, such as scheduling meetings or generating reports. The skill checks if senders are on the owner/admin list, validates SPF/DKIM headers to confirm identity, and sanitizes content to block social engineering attacks. This allows safe command execution while protecting against unauthorized access.
A bank employs an AI agent to analyze employee emails for phishing threats. The skill verifies sender domains against trusted lists, scans attachments for blocked file types like .exe or .js, and detects injection patterns in email bodies. It flags suspicious emails for review, reducing the risk of data breaches.
Law firms use an AI agent to extract and process legal documents from emails. The skill sanitizes email content by stripping HTML and decoding encoded text, ensuring only clean, newest messages are analyzed. It validates sender authentication to prevent tampering with sensitive case information.
Marketing teams send email commands to an AI agent to manage campaigns or update content. The skill verifies senders as trusted admins, scans for prompt injection in email bodies, and enforces attachment policies to block malicious files. This enables safe automation of marketing workflows.
Offer the skill as a cloud-based service with tiered pricing based on email volume and features like advanced threat detection or custom sender lists. Revenue comes from monthly subscriptions, with add-ons for enterprise support and integration with email providers like Gmail or Proton Mail.
Sell perpetual licenses or annual contracts to large organizations for on-premise deployment. Include customization options, priority support, and compliance features tailored to industries like finance or healthcare. Revenue is generated through upfront fees and ongoing maintenance charges.
Provide a free basic version with limited sender verification and sanitization, then upsell to premium tiers for features like attachment scanning, detailed logging, and multi-provider support. Revenue comes from conversions to paid plans and in-app purchases for advanced security modules.
💬 Integration Tip
Integrate this skill early in your email processing pipeline, using the provided scripts like verify_sender.py and sanitize_content.py to enforce security checks before any command execution.
Scored Apr 19, 2026
API-first email platform designed for AI agents. Create and manage dedicated email inboxes, send and receive emails programmatically, and handle email-based workflows with webhooks and real-time events. Use when you need to set up agent email identity, send emails from agents, handle incoming email workflows, or replace traditional email providers like Gmail with agent-friendly infrastructure.
Secured Email Mnagement - Gmail, Outlook & Exchange - list, search, read, send, reply, forward, delete, and modify emails across multiple accounts (gog-cli s...
王昊自动回复助手。帮王昊自动响应同事的业务咨询。王昊是追光战队拓新主管。触发场景：(1) cron定时自动扫描未回复消息 (2) 用户说「帮我回复」「自动回复一下」手动触发。(3) 王昊问「今天有什么未完成的事项」。
Email Template Builder
Send emails via Resend API from any verified domain. Use when sending emails, notifications, or automated messages. Supports HTML and plain text. Default voi...
通过阿里云邮箱、QQ邮箱或163邮箱等发送和接收邮件。支持发送普通邮件、带附件邮件、接收邮件、检查新邮件。当用户要求发送邮件、查看邮件、检查新邮件时使用。