Security Research · Apr 21, 2026 · Vitalii Rudnykh

When an AI Agent Can Send Email, It Can Also Send Your .env

OpenClaw ships a mail skill that wires the sensor up to the himalaya CLI. Here's how that email path actually works, what the sensor sees, what the shell sees, and why that split turns a mundane feature into an exfiltration channel.

When an AI Agent Can Send Email, It Can Also Send Your .env