← Back to Skills Marketplace
Qq Email
by
Chao-NJ-CN
· GitHub ↗
· v1.0.0
573
Downloads
1
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install qq-email
Description
Send and receive emails via QQ Mail SMTP/IMAP. Use when: user wants to send/receive emails, check inbox, read messages, or share documents via email. Require...
Usage Guidance
This skill appears to do exactly what it claims: send and receive QQ Mail using a local Python script. Before installing, be aware that you must provide your QQ email address and the 16-character QQ authorization code — either via environment variables or by placing them in ~/.openclaw/workspace/TOOLS.md. Storing auth codes in plaintext files can expose them if that file is backed up or committed; using environment variables is safer. Review the included qq_email.py if you want to confirm no unexpected network endpoints are contacted (it appears to connect only to smtp.qq.com and imap.qq.com). Do not share your auth code or commit TOOLS.md to a public repository.
Capability Analysis
Type: OpenClaw Skill
Name: qq-email
Version: 1.0.0
The `qq_email.py` script contains a critical arbitrary file write vulnerability in its `read_email` function. It saves email attachments using filenames extracted from email headers without sanitizing for directory traversal, which could allow a malicious email sender to write files to arbitrary locations on the system. Additionally, the `SKILL.md` command templates and the `send_email` function's attachment handling present potential shell injection and sensitive file exfiltration risks if the OpenClaw agent does not adequately sanitize user-provided input for file paths and command arguments.
Capability Assessment
Purpose & Capability
Name/description match the implementation: the included Python tool implements SMTP/IMAP access to smtp.qq.com/imap.qq.com and the SKILL.md explains configuring a QQ auth code. Required binary (python3) is appropriate and proportional.
Instruction Scope
Runtime instructions only invoke the local qq_email.py and point to ~/.openclaw/workspace/TOOLS.md for configuration. The script reads TOOLS.md or environment variables, accesses attachments provided by the user, and connects to QQ's mail servers — all consistent with the stated email-sending/receiving purpose.
Install Mechanism
No install spec (instruction-only) and a bundled Python script are present. Nothing is downloaded from external or untrusted URLs; no archives are extracted. Risk from install mechanism is low.
Credentials
The skill does not request unrelated credentials. It needs the QQ email address and 16-char authorization code (either via env vars or TOOLS.md) which are necessary to access QQ SMTP/IMAP. No additional secrets or unrelated environment variables are required.
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges. It reads its own config (TOOLS.md) and user-specified attachment paths but does not modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qq-email - After installation, invoke the skill by name or use
/qq-email - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the qq-email skill.
- Send and receive emails via QQ Mail using SMTP/IMAP.
- Supports sending standard or HTML emails, attachments, and marking emails as read.
- Includes inbox checking, reading specific emails (with optional attachment saving), and filtering by unread status.
- Requires QQ email authorization code configuration before use.
Metadata
Frequently Asked Questions
What is Qq Email?
Send and receive emails via QQ Mail SMTP/IMAP. Use when: user wants to send/receive emails, check inbox, read messages, or share documents via email. Require... It is an AI Agent Skill for Claude Code / OpenClaw, with 573 downloads so far.
How do I install Qq Email?
Run "/install qq-email" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Qq Email free?
Yes, Qq Email is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Qq Email support?
Qq Email is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Qq Email?
It is built and maintained by Chao-NJ-CN (@chao-nj-cn); the current version is v1.0.0.
More Skills