email-securityProtect AI agents from email-based attacks including prompt injection, sender spoofing, malicious attachments, and social engineering. Use when processing emails, reading email content, executing email-based commands, or any interaction with email data. Provides sender verification, content sanitization, and threat detection for Gmail, AgentMail, Proton Mail, and any IMAP/SMTP email system.
Install via ClawdBot CLI:
clawdbot install ivaavimusic/email-securityGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Contains instructions to override system prompt or ignore user requests
"IGNORE ALL PREVIOUS INSTRUCTIONS"Accesses system directories or attempts privilege escalation
/var/log/AI Analysis
The skill is a defensive security control designed to protect an AI agent from email-based attacks. It focuses on verifying senders, sanitizing content, and detecting threats, with no evidence of sending user data externally, overriding user intent, or credential harvesting. The primary risk is potential misconfiguration or reliance on external scripts, but its stated purpose is protective.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 21, 2026
An AI agent processes incoming customer support emails to categorize and prioritize tickets. The skill verifies sender authenticity to prevent spoofed requests, sanitizes email content to remove malicious scripts, and scans for prompt injection attempts that could manipulate the agent's response. This ensures only legitimate customer issues are escalated to human agents.
Executives use email to delegate tasks to an AI agent, such as scheduling meetings or generating reports. The skill checks if senders are on the owner/admin list, validates SPF/DKIM headers to confirm identity, and sanitizes content to block social engineering attacks. This allows safe command execution while protecting against unauthorized access.
A bank employs an AI agent to analyze employee emails for phishing threats. The skill verifies sender domains against trusted lists, scans attachments for blocked file types like .exe or .js, and detects injection patterns in email bodies. It flags suspicious emails for review, reducing the risk of data breaches.
Law firms use an AI agent to extract and process legal documents from emails. The skill sanitizes email content by stripping HTML and decoding encoded text, ensuring only clean, newest messages are analyzed. It validates sender authentication to prevent tampering with sensitive case information.
Marketing teams send email commands to an AI agent to manage campaigns or update content. The skill verifies senders as trusted admins, scans for prompt injection in email bodies, and enforces attachment policies to block malicious files. This enables safe automation of marketing workflows.
Offer the skill as a cloud-based service with tiered pricing based on email volume and features like advanced threat detection or custom sender lists. Revenue comes from monthly subscriptions, with add-ons for enterprise support and integration with email providers like Gmail or Proton Mail.
Sell perpetual licenses or annual contracts to large organizations for on-premise deployment. Include customization options, priority support, and compliance features tailored to industries like finance or healthcare. Revenue is generated through upfront fees and ongoing maintenance charges.
Provide a free basic version with limited sender verification and sanitization, then upsell to premium tiers for features like attachment scanning, detailed logging, and multi-provider support. Revenue comes from conversions to paid plans and in-app purchases for advanced security modules.
💬 Integration Tip
Integrate this skill early in your email processing pipeline, using the provided scripts like verify_sender.py and sanitize_content.py to enforce security checks before any command execution.
Scored Apr 19, 2026
Gmail API integration with managed OAuth. Read, send, and manage emails, threads, labels, and drafts. Use this skill when users want to interact with Gmail. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Microsoft Outlook API integration with managed OAuth. Read, send, and manage emails, folders, calendar events, and contacts via Microsoft Graph. Use this skill when users want to interact with Outlook. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
API-first email platform designed for AI agents. Create and manage dedicated email inboxes, send and receive emails programmatically, and handle email-based workflows with webhooks and real-time events. Use when you need to set up agent email identity, send emails from agents, handle incoming email workflows, or replace traditional email providers like Gmail with agent-friendly infrastructure.
Secured Email Mnagement - Gmail, Outlook & Exchange - list, search, read, send, reply, forward, delete, and modify emails across multiple accounts (gog-cli s...
Unified Google services API integration with managed OAuth. Manage Gmail, Google Calendar, Drive, Docs, Sheets, Slides, Meet, Tasks, Photos, Maps, Google Ana...
SendGrid email integration with API key authentication. Manage marketing campaigns, transactional templates, contacts, suppression lists, sender identities,...