← Back to Skills Marketplace
1768
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install mailbox
Description
Manage and read emails via the mailbox CLI with JSON outputs, supporting listing, showing, deleting, and monitoring emails securely and efficiently.
README (SKILL.md)
Mailbox CLI (OpenClaw Skill)
Use the mailbox CLI as a tool to read and manage email. OpenClaw handles channel delivery and scheduling. The mailbox CLI returns structured JSON outputs and optional text summaries.
Requirements
- mailbox CLI installed (
npm install -g mailbox-cli) - Credentials in
~/.config/mailbox/auth.json
Commands (examples)
mailbox account list --jsonmailbox email list --limit 20 --jsonmailbox email show \x3Cemail_uid> --account-id \x3Caccount_id> --jsonmailbox email show \x3Cemail_uid> --account-id \x3Caccount_id> --preview --no-html --jsonmailbox email show \x3Cemail_uid> --account-id \x3Caccount_id> --preview --no-html --strip-urls --jsonmailbox email delete \x3Cemail_uid> --account-id \x3Caccount_id> --folder INBOX --confirm --jsonmailbox digest run --jsonmailbox monitor run --jsonmailbox inbox --limit 15 --text
Safety rules
- Always use
--jsonfor automation and checksuccess. - Include
--account-idfor destructive operations. - Destructive operations default to dry-run unless
--confirmis provided. - Prefer
--dry-runbefore mutating when available.
Output contract
- JSON response includes
successanderrorfields. erroris an object with{ code, message, detail? }.- Exit codes: 0 success, 1 operation failed, 2 invalid usage.
Usage Guidance
Do not install blindly. Before enabling this skill: (1) Ask the publisher to update the manifest to declare the required config path (~/.config/mailbox/auth.json) and any primary credential. (2) Verify the mailbox-cli npm package source (project repo, maintainers, release artifacts) — avoid running `npm install -g` for an unreviewed package. (3) Inspect the contents of ~/.config/mailbox/auth.json to understand what tokens/credentials would be exposed to the agent. (4) Prefer running the CLI in an isolated environment or container and require explicit confirmation for destructive operations; confirm the skill uses --dry-run by default and requires --confirm and --account-id for deletes. If the publisher cannot justify or correct the missing manifest entries, treat the skill as high risk and avoid installing.
Capability Analysis
Type: OpenClaw Skill
Name: mailbox
Version: 1.0.0
The skill bundle describes an OpenClaw skill to manage email using a `mailbox-cli`. All instructions and examples in `SKILL.md` are directly related to the stated purpose, including installing the CLI via `npm` and accessing `~/.config/mailbox/auth.json` for credentials. There is no evidence of prompt injection attempts against the agent, data exfiltration, malicious execution beyond standard package installation, persistence mechanisms, or obfuscation. Safety rules for destructive operations are explicitly mentioned, indicating a focus on secure usage.
Capability Assessment
Purpose & Capability
The SKILL.md describes an email-management CLI (mailbox CLI) and therefore the skill's purpose matches its runtime actions. However, the skill metadata lists no required config paths or credentials while the instructions explicitly require credentials at ~/.config/mailbox/auth.json and a global npm package; that mismatch is inconsistent and unexplained.
Instruction Scope
Instructions are narrowly scoped to running the mailbox CLI and checking JSON outputs, which fits an email management skill. They do instruct the agent to rely on credentials stored at a specific local path (~/.config/mailbox/auth.json), which is outside the declared manifest and should have been declared.
Install Mechanism
This is an instruction-only skill (no install spec). SKILL.md requires `npm install -g mailbox-cli`, but the manifest provides no install instructions or provenance for that package. Global npm installation of an unvetted package is a non-trivial risk and should be specified and audited in the manifest.
Credentials
The skill requests access to local credentials (the auth.json path) but the registry metadata lists no required config paths or primary credential. Requiring a credentials file is reasonable for an email tool, but it must be declared; the omission is an inconsistency that could hide sensitive access.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence, and there are no install scripts or code files that would persist or modify other skills. Autonomous invocation is allowed (platform default), which is normal for skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mailbox - After installation, invoke the skill by name or use
/mailbox - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of Mailbox CLI skill for OpenClaw.
- Provides commands to list, read, preview, delete, and monitor emails using structured JSON outputs.
- Emphasizes safety: destructive operations require `--account-id` and `--confirm`.
- Supports dry-run for mutating actions; automation should always use `--json` and check `success`.
- Standard output contract with JSON responses and clear exit codes for success, failure, and invalid usage.
Metadata
Frequently Asked Questions
What is email skill?
Manage and read emails via the mailbox CLI with JSON outputs, supporting listing, showing, deleting, and monitoring emails securely and efficiently. It is an AI Agent Skill for Claude Code / OpenClaw, with 1768 downloads so far.
How do I install email skill?
Run "/install mailbox" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is email skill free?
Yes, email skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does email skill support?
email skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created email skill?
It is built and maintained by 郭立lee (@leeguooooo); the current version is v1.0.0.
More Skills