one-mail

统一邮箱管理 CLI，支持 Gmail、Outlook、网易邮箱（163.com、126.com）。适用于：(1) 收取/发送邮件，(2) 跨账户搜索邮件，(3) 管理多个邮箱账户，(4) 查看邮件统计。当用户提到邮件、邮箱、email、发邮件、收邮件、查邮件时触发。

This repo contains a plausible CLI mail client but has some inconsistencies you should address before installing: (1) The registry metadata claims no required binaries/env but the scripts need gog (for Gmail), curl, jq, python3 and openssl — install those first. (2) setup.sh/accounts.sh will prompt for OAuth client secrets, refresh tokens and app-specific passwords and store them in ~/.onemail/credentials.json (file is chmod 600). If you prefer, use the optional macOS Keychain support or review save_credentials/get_credentials to ensure you are comfortable with local storage. (3) install.sh creates /usr/local/bin/onemail but the manifest shown does not include an onemail entrypoint — verify the onemail launcher exists in the package before running install.sh. (4) The code uses eval when invoking the gog CLI and constructs some HTTP/IMAP arguments by string concatenation; avoid passing untrusted input into these commands to prevent shell/parameter injection. (5) All network endpoints contacted are the expected providers (Microsoft, Gmail via gog, NetEase IMAP/SMTP); review the OAuth flows (client IDs/secrets) and ensure you trust the client configuration you provide. If you need higher assurance, run the scripts in a sandboxed account or test environment and inspect ~/.onemail/credentials.json after setup.

Type: OpenClaw Skill Name: one-mail Version: 1.3.0 The skill bundle is a functional multi-account email CLI, but it contains a significant shell injection vulnerability in 'scripts/lib/gmail.sh' where the 'eval' command is used on unsanitized user input (search queries). It also handles highly sensitive data, including email passwords and OAuth refresh tokens, storing them in '~/.onemail/credentials.json'. While it attempts to secure these with 'chmod 600' and the logic appears consistent with its stated purpose, the combination of sensitive credential handling and RCE-prone command construction warrants a suspicious classification.