← Back to Skills Marketplace
11744
Downloads
20
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install outlook
Description
Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar events, or scheduling.
Usage Guidance
Install only if you are comfortable allowing an agent to read and modify Outlook mail, send email as you, and edit your calendar. Treat ~/.outlook-mcp as sensitive credential storage, avoid printing access tokens, review every send/delete/bulk/calendar-changing action before it runs, and avoid downloading attachments to sensitive paths until path handling is fixed.
Capability Analysis
Type: OpenClaw Skill
Name: outlook
Version: 1.3.0
The skill is classified as suspicious due to a path traversal vulnerability in the `scripts/outlook-mail.sh` file, specifically within the `download` command. This vulnerability allows an attacker to write email attachment content to arbitrary file paths on the agent's filesystem by crafting a malicious attachment name (e.g., `../../.bashrc`). While not clear evidence of intentional malicious behavior by the skill developer, this flaw provides a powerful primitive for a malicious prompt to exploit, potentially leading to persistence or arbitrary code execution. Additionally, the skill requests broad permissions (Mail.ReadWrite, Mail.Send, Calendars.ReadWrite) which, while aligned with its stated purpose, represent high-risk capabilities.
Capability Assessment
Purpose & Capability
Reading, searching, sending, moving, deleting Outlook mail and managing calendar events via Microsoft Graph matches the stated Outlook integration purpose, but those capabilities are high-impact account actions.
Instruction Scope
The scripts execute sends, replies, forwards, mailbox deletes, bulk deletes, folder deletes, and calendar create/update/delete actions directly, without a confirmation or preview step in the artifact instructions.
Install Mechanism
Setup is disclosed and interactive, but it automatically creates an Azure app registration, grants broad delegated Graph permissions, creates a two-year client secret, and saves configuration locally.
Credentials
The attachment download command writes decoded attachment bytes to a caller-supplied path combined with the attachment name, with no path normalization or traversal protection, which can overwrite local files under the user's permissions.
Persistence & Privilege
The skill stores a client secret plus OAuth access and refresh tokens in ~/.outlook-mcp and includes a command that prints the raw access token; this is disclosed but sensitive given Mail.ReadWrite, Mail.Send, Calendars.ReadWrite, and offline_access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install outlook - After installation, invoke the skill by name or use
/outlook - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Added calendar support (view/create/update/delete events, check availability)
Metadata
Frequently Asked Questions
What is Outlook?
Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar events, or scheduling. It is an AI Agent Skill for Claude Code / OpenClaw, with 11744 downloads so far.
How do I install Outlook?
Run "/install outlook" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Outlook free?
Yes, Outlook is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Outlook support?
Outlook is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Outlook?
It is built and maintained by jotamed (@jotamed); the current version is v1.3.0.
More Skills