Mufi Email Manager

한국형 이메일 통합 관리 도구. Gmail, 네이버, 다음, 카카오 메일을 IMAP/SMTP로 통합 관리. 읽지 않은 메일 요약, 키워드 필터링, 자동 답장, 일일 다이제스트 생성.

This package is an on-premises IMAP/SMTP email manager and the code matches the described features, but there are several red flags you should consider before installing or providing credentials: - The registry metadata declares no required env vars, but SKILL.md and the code require many email account credentials (GMAIL_*, NAVER_*, DAUM_*, KAKAO_*). Do not provide passwords to a skill whose metadata omits this requirement without verification of the publisher. - SKILL.md references scripts (digest.js, send.js, search.js) that are not included in the file list. Confirm the repository is complete and maintained, or ask the author for the missing files. - The project expects a .env at ../../.env (repo root). Ensure you add .env to .gitignore before creating it to avoid accidentally committing secrets. - Prefer using app-specific passwords or OAuth flows (especially for Gmail) rather than your primary account password. This code uses basic username/password auth for IMAP/SMTP which may require app passwords for some providers. - Review the code locally (you already have all source files) and run npm install in an isolated environment (container or VM) if you want to test. Check network activity if you are concerned about exfiltration — this repo only uses IMAP/SMTP and does not contain obvious remote exfil endpoints, but mismatched metadata and missing files are a sign to be cautious. If you plan to use it, verify the missing scripts, confirm the author/source, and only use account credentials you are willing to expose to a local tool (or better, use app-specific credentials).

Type: OpenClaw Skill Name: mufi-email-manager Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'mufi-email-manager' is a benign email management tool. It integrates with various Korean email services (Gmail, Naver, Daum, Kakao) using IMAP/SMTP. The `SKILL.md` provides clear instructions for setup, including the use of `.env` files for credentials and recommendations for app passwords, demonstrating security awareness. The Node.js scripts (`scripts/*.js`) utilize standard libraries (`imap`, `mailparser`, `nodemailer`, `dotenv`) to perform email operations like checking, filtering, summarizing, and replying. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All functionalities are aligned with the stated purpose of an email manager.