← Back to Skills Marketplace

139mail

Name: 139mail
Author: chang-tong

by Zhang Dong · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

509

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install 139mail-skill

Description

139邮箱邮件收发 Skill - 支持 IMAP/SMTP 协议，兼容139/QQ/163/Gmail等主流邮箱功能： 1. 发送邮件（SMTP） 2. 接收邮件（IMAP） 3. 查看收件箱列表 4. 查看未读邮件当用户提到 "发邮件"、"收邮件"、"查看邮件"、"邮箱" 或 "email" 时激活此 s...

README (SKILL.md)

139mail Skill

使用 IMAP/SMTP 协议收发邮件，支持 139 邮箱、QQ 邮箱、163 邮箱、Gmail 等主流邮箱。

功能特性

功能	说明
发送邮件	支持文本邮件、HTML 邮件、附件
接收邮件	查看收件箱、未读邮件、搜索邮件
邮件列表	列出最近邮件，支持分页
读取邮件	查看邮件详情、正文、附件列表

配置方法

1. 编辑配置文件

~/.openclaw/skills/139mail/config/email.json

2. 配置示例（139 邮箱）

{
  "email": "[email protected]",
  "password": "你的授权码",
  "smtp": {
    "host": "smtp.139.com",
    "port": 465,
    "secure": true
  },
  "imap": {
    "host": "imap.139.com",
    "port": 993,
    "secure": true
  }
}

3. 主流邮箱配置参考

QQ 邮箱：

SMTP: smtp.qq.com:465
IMAP: imap.qq.com:993
密码: QQ 邮箱授权码

163 邮箱：

SMTP: smtp.163.com:465
IMAP: imap.163.com:993
密码: 163 邮箱授权码

Gmail：

SMTP: smtp.gmail.com:465
IMAP: imap.gmail.com:993
密码: 应用专用密码

使用方法

发送邮件

普通邮件：

发邮件给 [email protected]，主题是 "测试邮件"，内容是 "这是一封测试邮件"

带附件的邮件：

发邮件给 [email protected]，主题是 "文档"，内容是 "请查收附件"，附件是 /path/to/document.pdf

查看收件箱

查看最近的邮件
显示未读邮件

读取邮件

读取第 3 封邮件
查看邮件详情 12345

安全说明

配置文件存储在本地，不会被上传到云端
建议使用邮箱授权码而非登录密码
配置文件权限已设置为仅用户可读

Usage Guidance

This skill appears to be what it claims: an IMAP/SMTP email client implemented in Node.js. Before installing: (1) confirm where the config file lives (SKILL.md path and script path differ) and place your credentials in the correct location; (2) prefer using provider 'authorization codes' or app-specific passwords (not your main account password); (3) restrict file permissions on the config (chmod 600) and avoid committing it to git; (4) be aware the script sets tlsOptions.rejectUnauthorized = false for IMAP connections (this weakens certificate validation and could allow MITM attacks) — consider modifying the code to enable proper TLS verification for your mail servers; (5) review or sandbox the skill if you are concerned about exposing attachments or credentials, and consider using an OS secret manager rather than a plaintext file.

Capability Analysis

Type: OpenClaw Skill Name: 139mail-skill Version: 1.0.0 The skill provides legitimate email functionality but contains a security vulnerability in `scripts/email.js` where `rejectUnauthorized: false` is used for IMAP connections, disabling TLS certificate validation and enabling potential man-in-the-middle attacks. Additionally, the script's ability to attach arbitrary local files via the `--attach` argument represents a high-risk capability that could be used for data exfiltration if the agent is targeted by prompt injection, although this behavior is currently aligned with the skill's stated purpose.

Capability Assessment

✓ Purpose & Capability

Name/description match the code and package.json: the skill implements send/list/read via SMTP/IMAP and depends on nodemailer/imap/mailparser — all expected for an email client.

ℹ Instruction Scope

SKILL.md instructs storing credentials in a local config and describes usage; the runtime script reads a local JSON config and may print connection info during a 'test'. Minor inconsistency: SKILL.md suggests ~/.openclaw/skills/139mail/config/email.json while the script reads ../config/email.json relative to the package root. Also the script will read files passed as attachments (expected) and will output some config values during 'test'.

✓ Install Mechanism

This is an instruction+code skill with typical npm dependencies listed in package.json and package-lock.json; there is no remote arbitrary download, no URL shorteners, and dependencies are standard email-related packages.

✓ Credentials

No environment variables or external credentials are requested; credentials are expected in a local config file (email/password). This is proportional for an email client, but storing plaintext credentials in a file is sensitive and should be handled carefully.

✓ Persistence & Privilege

always is false and the skill does not request system-wide settings or modify other skills. It only reads its own config and files specified for attachments.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install 139mail-skill
After installation, invoke the skill by name or use /139mail-skill
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.0

139邮箱邮件收发 Skill - 支持 IMAP/SMTP 协议，兼容139/QQ/163/Gmail等主流邮箱

Metadata

Slug 139mail-skill

Version 1.0.0

License —

All-time Installs 2

Active Installs 2

Total Versions 1

Frequently Asked Questions

What is 139mail?

139邮箱邮件收发 Skill - 支持 IMAP/SMTP 协议，兼容139/QQ/163/Gmail等主流邮箱功能： 1. 发送邮件（SMTP） 2. 接收邮件（IMAP） 3. 查看收件箱列表 4. 查看未读邮件当用户提到 "发邮件"、"收邮件"、"查看邮件"、"邮箱" 或 "email" 时激活此 s... It is an AI Agent Skill for Claude Code / OpenClaw, with 509 downloads so far.

How do I install 139mail?

Run "/install 139mail-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 139mail free?

Yes, 139mail is completely free (open-source). You can download, install and use it at no cost.

Which platforms does 139mail support?

139mail is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 139mail?

It is built and maintained by Zhang Dong (@chang-tong); the current version is v1.0.0.

More Skills