military bidding email

军工采购（军采）商机专用推报工具。汇总三大军采平台数据，生成 Excel 并通过 SMTP 发送邮件报告。与政府采购（政采）工具无关，仅处理军队采购渠道。当用户说"milb-email"、"军工商机邮件"、"推送军工商机"、"军工商机通报"时触发。注意：这不是通用邮件客户端，仅用于执行 milb 业务逻辑。

Key points to consider before installing or running this skill: - The skill requires SMTP credentials (EMAIL_SMTP_USER and EMAIL_SMTP_PASSWORD) and email addresses to operate. These are sensitive: anyone with these credentials can send email via that SMTP server. Only supply them if you trust the code and the environment. - Metadata inconsistencies: registry metadata lists no required env vars, yet the SKILL.md and code require several EMAIL_* values. Confirm the actual required environment variables and where the .env must live before use. - Configuration path mismatch: SKILL.md suggests milb_email/.env, but the code looks in the current working directory or ~/.config/milb-email/.env. CLAUDE.md mentions an attachment path under ~/.openclaw/workspace. Clarify which paths will be read/written to avoid accidental exposure of other files. - External dependency: the fetch logic depends on a separate package/binary 'milb_fetcher' (not included). Verify the provenance and content of milb_fetcher before installing; it is responsible for retrieving data from the three military procurement sites and could perform additional network operations. - Review attachments: the code will attach an Excel file from ~/.openclaw/workspace/military-bidding/… ensure that directory only contains files you expect to be sent. - To raise confidence: request or inspect the milb_fetcher source, update registry metadata to declare required env vars explicitly, and fix SKILL.md/docs so the expected .env path and install instructions match the code. If you cannot verify those, treat the skill as potentially risky to run with real SMTP credentials or in environments containing sensitive files.

Type: OpenClaw Skill Name: military-bidding-email Version: 0.2.8 The skill bundle is a specialized tool for aggregating military procurement data from Chinese platforms and sending reports via SMTP. The code in milb_email/fetcher.py and milb_email/config.py implements standard functionality for data processing, Excel generation, and email transmission using smtplib. While it handles sensitive SMTP credentials and accesses specific workspace directories, its behavior is strictly aligned with the stated purpose in SKILL.md and lacks any indicators of malicious intent, obfuscation, or unauthorized data exfiltration.