Validate email addresses with format checking and risk scoring. Use when users need to verify email format, check disposable emails, or validate bulk email l...
Security Analysis
high confidenceThe skill's code, instructions, and requirements are coherent: it performs local, deterministic email format and heuristic risk checks and does not request credentials or perform network activity.
Name/description promise local format checking and risk scoring; the included handler.ts implements exactly that with local regex, built-in domain lists, and arithmetic scoring. No unrelated credentials, binaries, or install steps are requested.
SKILL.md instructs purely local validation and the code performs only string/regex operations and array lookups. Examples show how a client might call the skill via a Claw0x API (mentioning an API key) but those are integration examples for the platform — the skill itself contains no network calls or I/O.
No install spec is present (instruction-only) and the single code file is simple TypeScript that will run locally. There are no downloads, external installers, or archive extraction steps.
The skill declares no required environment variables, no credentials, and no config paths. Example snippets reference a platform API key only for clients invoking the skill externally; that is not required by the skill runtime.
Skill is not marked always:true and does not request persistent system privileges or modify other skills. It can be invoked by agents (the platform default), which is expected for a callable skill.
Guidance
This skill appears to be what it says: a local, fast email-format checker and simple heuristic risk scorer. It does NOT perform DNS/MX lookups, SMTP verification, or deliverability checks — do not rely on it for final deliverability decisions or security-critical verification. The disposable/free-domain lists and risk formula are small and heuristic; if you need production-grade email validation (MX checks, SMTP probing, or a more comprehensive disposable domain list), use a specialized service or add those checks yourself. Review whether the heuristic scoring aligns with your policy before auto-blocking users based solely on this score.
Latest Release
v1.0.1
- Adds full local (offline) email validation: no external API calls or API keys needed. - Streamlines documentation with clear quickstart, integration recipes, and usage scenarios. - Expands and clarifies input/output schema and error handling. - Introduces local-only logic for format validation, domain checks, and risk scoring. - Clearly explains what the skill does and does NOT do for user transparency.
More by @kennyzir
Published by @kennyzir on ClawHub
