Simplelogin Cli

Create and manage SimpleLogin email aliases from the command line. Protect your real email with secure, private aliases.

This skill appears to be a normal SimpleLogin CLI that needs your SimpleLogin API key. Before installing: 1) Confirm the skill's source/repository (the package references GitHub but the registry source is unknown). 2) Only provide your SIMPLELOGIN_API_KEY via an env var or a trusted secret store; the skill will also look at ~/.openclaw/secrets/simplelogin.json as a fallback. 3) Note the small discrepancy: registry metadata doesn't mark the API key as a primary credential — verify that the published package and metadata are consistent. 4) The included script talks to https://app.simplelogin.io (expected) and prints API responses; it does not exfiltrate secrets in the files reviewed, but you should still inspect the installed copy yourself before running. 5) Minor implementation issues to be aware of: the script uses the HTTP header 'Authentication' (some APIs expect 'Authorization: Bearer <token>') and attempts to run pbcopy (macOS) — these are likely bugs, not exfiltration. If you can't confirm the upstream repository and metadata, treat this as untrusted and avoid supplying secrets.

Type: OpenClaw Skill Name: simplelogin-cli Version: 3.0.1 The skill provides a command-line interface for managing SimpleLogin email aliases, including creating aliases and managing reverse aliases for replies. The included script (scripts/test-reverse-alias.sh) correctly handles API authentication via environment variables or the specified local secret path and communicates only with the official SimpleLogin API endpoint (app.simplelogin.io). No indicators of malicious intent, data exfiltration, or prompt injection were found.