← Back to Skills Marketplace
12046
Downloads
20
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install outlook
Description
Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar events, or scheduling.
Usage Guidance
Install only if you are comfortable granting this skill read/write/send access to your Outlook mail and read/write access to your calendar with refresh-token persistence. Avoid running the displayed curl-to-sudo-bash Azure CLI installer, do not use the token-printing command in logged agent sessions, confirm any send/delete/bulk/folder/calendar action yourself, and treat downloaded attachments as able to overwrite local files unless you choose a safe empty directory.
Capability Analysis
Type: OpenClaw Skill
Name: outlook
Version: 1.3.0
The skill is classified as suspicious due to a path traversal vulnerability in the `scripts/outlook-mail.sh` file, specifically within the `download` command. This vulnerability allows an attacker to write email attachment content to arbitrary file paths on the agent's filesystem by crafting a malicious attachment name (e.g., `../../.bashrc`). While not clear evidence of intentional malicious behavior by the skill developer, this flaw provides a powerful primitive for a malicious prompt to exploit, potentially leading to persistence or arbitrary code execution. Additionally, the skill requests broad permissions (Mail.ReadWrite, Mail.Send, Calendars.ReadWrite) which, while aligned with its stated purpose, represent high-risk capabilities.
Capability Assessment
Credentials
Most local file access is tied to the Outlook configuration directory, but attachment download writes decoded attachment content to a caller-supplied path combined with the attachment name without path normalization, traversal checks, symlink checks, or no-clobber protection.
Install Mechanism
The automated setup creates an Azure app registration, adds Mail.ReadWrite, Mail.Send, Calendars.ReadWrite, and User.Read delegated permissions, creates a two-year client secret, and stores OAuth material locally. It also prints a curl-to-sudo-bash Azure CLI install suggestion when Azure CLI is missing; this is not auto-executed, but it is unsafe setup guidance.
Instruction Scope
The skill exposes high-impact operations such as send, reply, forward, delete, bulk-delete, delete-folder, calendar update, and calendar delete without documented confirmation, preview, or rollback safeguards. The behavior is command-driven rather than hidden, but the scope is broad for an agent-invoked email/calendar skill.
Persistence & Privilege
The skill stores client credentials and access/refresh tokens in ~/.outlook-mcp, uses offline_access for ongoing access, refreshes tokens from disk, and includes a command that prints the bearer access token to stdout. chmod 600 is used during setup, but the persistence and token-printing behavior remain high-impact.
Purpose & Capability
The main purpose is coherent: the artifacts include mail and calendar scripts using Microsoft Graph for reading, searching, sending, modifying, and deleting Outlook data. Some additional mail capabilities, including forwarding, drafts, bulk delete, folder deletion, categorization, and attachment download, are present in the script help but are not clearly listed in the main skill usage section.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install outlook - After installation, invoke the skill by name or use
/outlook - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Added calendar support (view/create/update/delete events, check availability)
Metadata
Frequently Asked Questions
What is Outlook?
Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar events, or scheduling. It is an AI Agent Skill for Claude Code / OpenClaw, with 12046 downloads so far.
How do I install Outlook?
Run "/install outlook" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Outlook free?
Yes, Outlook is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Outlook support?
Outlook is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Outlook?
It is built and maintained by jotamed (@jotamed); the current version is v1.3.0.
More Skills