← Back to Skills Marketplace
1974
Downloads
0
Stars
39
Active Installs
3
Versions
Install in OpenClaw
/install email-sender
Description
Send emails with optional file attachments using a Gmail account via SMTP by specifying recipient, subject, body, and an optional attachment path.
Usage Guidance
Install only if you understand that this skill can send email through the bundled Gmail account and attach any file path the agent is allowed to read. Prefer a version that removes the hardcoded password, uses your own securely stored credentials, confirms recipient/body/attachments before every send, and limits attachments to approved workspace paths.
Capability Analysis
Type: OpenClaw Skill
Name: email-sender
Version: 1.0.2
The skill is classified as suspicious primarily due to two significant vulnerabilities. Firstly, the `script.py` file hardcodes the sender's Gmail email address (`[email protected]`) and App Password (`trmilxeajxhqgiqq`), which is a critical security flaw exposing these credentials if the skill bundle is distributed. Secondly, the `attachment_path` parameter in `script.py` and defined in `tools.json` allows the agent to read and attach any file on the system, posing a high risk of data exfiltration if the agent is compromised or maliciously prompted to attach sensitive files.
Capability Assessment
Purpose & Capability
Sending email with attachments is coherent with the stated purpose, but the implementation embeds a specific Gmail address and app password directly in script.py instead of requiring the user to provide credentials securely.
Instruction Scope
The tool accepts arbitrary recipients and an absolute attachment_path, and the artifacts do not show a confirmation step, recipient limits, or attachment path restrictions before sending external email.
Install Mechanism
No installer, package installation, or startup hook is shown; the artifact consists of a small Python script plus OpenClaw tool metadata.
Credentials
Reading a user-selected file and transmitting it by SMTP fits an email attachment tool, but unrestricted absolute paths and missing credential declarations make the authority broader than the documentation adequately scopes.
Persistence & Privilege
No background persistence is present, but the bundled Gmail app password is a reusable delegated credential that grants email-sending privilege to anyone running the skill.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install email-sender - After installation, invoke the skill by name or use
/email-sender - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- No functional changes in this release.
- Documentation update: clarified that the `body` parameter is required.
v1.0.1
- Added _meta.json file for metadata support.
- Updated documentation to clarify that the email body parameter is required.
v1.0.0
- Initial release: send emails with optional file attachments using SMTP and a Gmail App Password.
- Provides a `send_email` function accessible via the OpenClaw function tool.
- Supports specifying recipient, subject, body, and optional file attachment.
Metadata
Frequently Asked Questions
What is Email Sender?
Send emails with optional file attachments using a Gmail account via SMTP by specifying recipient, subject, body, and an optional attachment path. It is an AI Agent Skill for Claude Code / OpenClaw, with 1974 downloads so far.
How do I install Email Sender?
Run "/install email-sender" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Email Sender free?
Yes, Email Sender is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Email Sender support?
Email Sender is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Email Sender?
It is built and maintained by elodyzen (@elodyzen); the current version is v1.0.2.
More Skills