← Back to Skills Marketplace
68
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install simple-mail-client
Description
Send, receive, and manage emails using IMAP/POP3 and SMTP with multi-account support, attachments, and message status control.
Usage Guidance
This skill is functionally coherent for accessing and sending mail, but review the following before installing: 1) You must provide config.yaml containing account usernames/passwords—store it securely (correct file ownership/permissions) and prefer app-specific or bot accounts, not personal credentials. 2) The package-lock references a non-default npm mirror; validate dependency provenance or run npm install from a trusted registry and/or rebuild from source. 3) Because the skill reads mailboxes and can return message bodies, consider running it in an isolated environment or with limited accounts to reduce blast radius. 4) Ensure the runtime has Node and the required packages available (there is no install spec). If you are uncomfortable with any of the above, do not install or run the skill until provenance and deployment details are clarified.
Capability Analysis
Type: OpenClaw Skill
Name: simple-mail-client
Version: 1.0.0
The skill implements a standard email client, but the 'package-lock.json' contains highly anomalous entries, including non-existent future versions of several dependencies (e.g., 'nodemailer' 8.0.1, 'pino' 10.3.1, 'typescript' 5.9.3) and a publication date in the year 2026. While the provided source code in 'src/mailClient.ts' appears functional and lacks explicit malicious logic, the use of non-standard versions from a specific mirror (mirrors.tencentyun.com) presents a significant supply chain risk or indicates a synthetic/manipulated bundle. Additionally, the 'getMessage' implementation in 'dist/mailClient.js' is poorly implemented and may return the entire raw email source (including all sensitive headers) to the agent.
Capability Assessment
Purpose & Capability
Name/description match the code: it implements sending via SMTP (nodemailer) and reading/updating via IMAP (imapflow). Declared capabilities (multi-account, attachments, read/unread, move) are implemented and the required libraries are appropriate.
Instruction Scope
SKILL.md instructs you to copy config.example.yaml to config.yaml and 'inject' it. The runtime code reads config.yaml from disk and uses credentials to connect to mail servers. That is expected for a mail client, but note the skill will have access to full mailboxes (message fetch returns bodyText/source) and the config file contains plaintext credentials—ensure you trust the host placement and file permissions. The README's claim that credentials are 'not visible to the LLM' is implementation-dependent (the code does not intentionally return credentials, but errors or platform exposure could leak them).
Install Mechanism
There is no install spec even though the code depends on npm packages (imapflow, nodemailer, js-yaml). That mismatch means a platform or operator must ensure Node and those dependencies are present; otherwise the skill will fail. The included package-lock shows packages resolved from a third-party mirror (mirrors.tencentyun.com) rather than the default npm registry — not automatically malicious but worth verifying provenance before installing dependencies.
Credentials
The skill requests no env vars and instead expects a local config.yaml containing mail account credentials (username/password). That is proportionate for the stated purpose, but plaintext credentials in a file increase risk of accidental disclosure. The code does not request unrelated credentials or config paths.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system-wide settings, and only reads a local config.yaml for its own operation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install simple-mail-client - After installation, invoke the skill by name or use
/simple-mail-client - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of a generic email client skill supporting IMAP/POP3 + SMTP with username/password authentication.
- Multi-account support via accountId.
- Send emails with plain text, HTML, or Markdown bodies; supports multiple recipients and attachments.
- Receive, list, and view email details; filter by folder, date, unread status, or keyword.
- Retrieve attachments and manage read/unread status or move emails (IMAP only).
- Enhanced security: credentials stored host-side; sensitive content not logged.
- Configurable via sample YAML configuration.
Metadata
Frequently Asked Questions
What is Simple Mail Client?
Send, receive, and manage emails using IMAP/POP3 and SMTP with multi-account support, attachments, and message status control. It is an AI Agent Skill for Claude Code / OpenClaw, with 68 downloads so far.
How do I install Simple Mail Client?
Run "/install simple-mail-client" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Simple Mail Client free?
Yes, Simple Mail Client is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Simple Mail Client support?
Simple Mail Client is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Simple Mail Client?
It is built and maintained by wallinex (@wallinex); the current version is v1.0.0.
More Skills