Security Research · Apr 21, 2026 · Vitalii Rudnykh
When an AI Agent Can Send Email, It Can Also Send Your .env
OpenClaw ships a mail skill that wires the sensor up to the himalaya CLI. Here's how that email path actually works, what the sensor sees, what the shell sees, and why that split turns a mundane feature into an exfiltration channel.