email access - anyone crazy enough to give your mailbox access to OpenClaw? how to make it secure

Reddit r/openclaw Tools

Summary

OpenClaw offers Gmail access to read and organize emails, achieving a clean inbox while raising security concerns about injection attacks; the author seeks advice on enhancing security.

I asked OpenClaw to build a connector to Gmail with access to read messages and move them around into folders. It has no physical ability to delete a message, send anything, and at this point it's not allowed to read attachments. It went through my mailbox and categorised 20k messages, and for the first time in 10 years my inbox is clean, so the benefits are amazing. I know there are risks, especially for some newer messages to do some injection attack. I tried this already by sending some messages from some temporary accounts. I created asking it to do things (send back secrets etc.) and it ignored them, but I wonder what measures can be taken to secure it more?
Original Article

Similar Articles

Where OpenClaw Security Is Heading

Hacker News Top

OpenClaw details its security architecture using `fs-safe` for filesystem boundaries and Proxyline for network egress control, aiming to make its AI personal assistant trustworthy and auditable.

Openclaw as sys admin

Reddit r/openclaw

The author describes using Openclaw as a system administrator on Linux servers, leveraging a local Qwen 3.6 27b model for security audits, updates, and deploying kiosk mode tasks without external internet access.