Setup & Installation
openclaw skills install @ivaavimusic/email-security
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install email-security
What This Skill Does
A security layer for AI agents that process emails. Performs sender verification, content sanitization, and threat detection before any email-based command is executed. Covers prompt injection, sender spoofing, malicious attachments, and social engineering.
Centralizes email threat detection in a structured multi-step workflow rather than requiring agents to implement ad-hoc sanitization per integration.
When to use it
- Blocking prompt injection attacks hidden in email body text
- Verifying sender identity before executing email-based agent commands
- Sanitizing reply-chain emails before reading content
- Restricting attachment file types from unknown senders
- Rate-limiting commands from non-owner email addresses
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: Process commands from my inbox
AGENT
- 1Run verify_sender.py to check sender against owner-config.md
- 2Validate SPF/DKIM/DMARC headers if available
- 3Parse raw .eml file with parse_email.py to extract body text
- 4Sanitize extracted text with sanitize_content.py and scan for injection patterns
- 5Execute command only if all checks pass, or flag and alert owner
OUTPUT
Command executed safely, or threat flagged and logged with sender details