Outlook Add-in

Outlook sidebar add-in that brings the full power of your OpenClaw agent into Microsoft Outlook. Chat with your agent about any email, use all your tools and...

This skill is coherent for adding an Outlook sidebar that connects to your local OpenClaw Gateway, but it relies on running third‑party code and intentionally exposes your agent inside Outlook. Before proceeding: 1) Inspect the GitHub repository and manifest.xml — confirm the code is trustworthy, review requested Outlook permissions, and check recent commits/maintainer reputation. 2) Do not add https://localhost:3000 to Gateway allowed origins unless you trust the add-in; ensure your Gateway requires authentication and limit allowed origins to only necessary hosts. 3) Be cautious running npm install and a local dev server — run these steps in a controlled/dev environment (not on a critical machine) and audit node packages if possible. 4) Understand that exposing "full agent — with all tools, skills, and automations" to an email context can let the add-in read email content and invoke agent tools; keep sensitive accounts/data locked down and consider least-privilege configurations. 5) If you need higher assurance, ask the publisher for a signed release or a vetted package rather than running a dev server from source. If you cannot verify the repo or do not accept the above risks, avoid installing.

Type: OpenClaw Skill Name: outlook-addin Version: 0.2.0 The SKILL.md file contains instructions that direct an AI agent to perform high-risk shell and network operations, specifically cloning an external repository (github.com/nachtsheim/openclaw-outlook-addin) and executing 'npm install' and 'npm run dev'. While these actions are plausibly needed for the stated purpose of setting up an Outlook add-in, they represent a significant security risk by executing untrusted code from a remote source. According to the provided criteria, risky capabilities aligned with the stated purpose but lacking clear malicious intent are classified as suspicious.