← Back to Skills Marketplace
aprilvkuo

Resend Email Sender

by aprilvkuo · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
470
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install resend-email-sender
Description
Send emails using Resend API. Use when the user needs to send emails without configuring SMTP servers. Supports text and HTML emails, multiple recipients, CC...
Usage Guidance
This skill appears to do what it says (send mail through Resend) but take these precautions before installing or running it: 1) The runtime requires RESEND_API_KEY even though the registry metadata doesn't declare it — set a dedicated API key with minimal scope and rotate it if needed. 2) The script will load and export variables from home/.openclaw/workspace/.env (if present) before falling back to local .env; if you keep other secrets there, they could be picked up unintentionally. Consider placing the API key in a dedicated env or passing it directly rather than storing many secrets in a shared .env. 3) Review the included scripts/send_email.py yourself (or run in an isolated environment) — it uses curl via subprocess to post to https://api.resend.com/emails and does not appear to exfiltrate data elsewhere, but reading arbitrary .env files increases risk. 4) If you will let agents invoke this skill autonomously, ensure the agent's permissions and the API key scope are limited. If you want, provide the developer with a request to update the registry metadata to declare RESEND_API_KEY as a required credential and to document why the home .openclaw workspace .env is consulted.
Capability Analysis
Type: OpenClaw Skill Name: resend-email-sender Version: 1.0.0 The OpenClaw skill 'resend-email-sender' is designed to send emails via the Resend API. The `SKILL.md` provides clear, functional instructions without any prompt injection attempts. The `scripts/send_email.py` script correctly implements this functionality, retrieving API keys from environment variables or `.env` files and using `subprocess.run` with a list of arguments to execute `curl`, which mitigates shell injection risks. The script communicates with the legitimate Resend API endpoint (api.resend.com) and shows no evidence of data exfiltration, persistence mechanisms, or other malicious behaviors.
Capability Assessment
Purpose & Capability
The code and SKILL.md implement sending mail via Resend and need a RESEND_API_KEY and optional RESEND_FROM; this matches the declared purpose. However the registry metadata claims no required env vars/credentials while the runtime requires RESEND_API_KEY — an inconsistency that should be corrected or explained.
Instruction Scope
The included script load_env() will look for and parse a .env file in two places: home/.openclaw/workspace/.env and ./ .env, and will inject any key=value pairs into the process env if not already set. Loading home/.openclaw/workspace/.env is surprising: that path may contain unrelated secrets or environment variables. The script only sends data to the Resend API, but implicitly importing arbitrary .env variables increases scope and risk.
Install Mechanism
No install spec or external downloads; this is an instruction-only skill with a bundled Python script. Nothing is fetched from external URLs and no archives are extracted.
Credentials
Runtime requires a single API credential (RESEND_API_KEY) which is proportionate to sending email via Resend. However the skill also reads .openclaw workspace .env and will load any variables there into the environment — this could expose unrelated secrets if that .env contains them. Also the registry metadata failing to declare RESEND_API_KEY reduces transparency.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system configuration, and does not persist new credentials itself. Autonomous invocation is allowed by default (normal for skills) and is not combined with other high-risk flags.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install resend-email-sender
  3. After installation, invoke the skill by name or use /resend-email-sender
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Send emails via Resend API, support text/HTML, multiple recipients, CC/BCC
Metadata
Slug resend-email-sender
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Resend Email Sender?

Send emails using Resend API. Use when the user needs to send emails without configuring SMTP servers. Supports text and HTML emails, multiple recipients, CC... It is an AI Agent Skill for Claude Code / OpenClaw, with 470 downloads so far.

How do I install Resend Email Sender?

Run "/install resend-email-sender" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Resend Email Sender free?

Yes, Resend Email Sender is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Resend Email Sender support?

Resend Email Sender is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Resend Email Sender?

It is built and maintained by aprilvkuo (@aprilvkuo); the current version is v1.0.0.

💬 Comments