← Back to Skills Marketplace
287
Downloads
0
Stars
0
Active Installs
8
Versions
Install in OpenClaw
/install sendflare-skill
Description
通过 Sendflare SDK 发送带附件的电子邮件，管理联系人列表，支持 CC/BCC 和安全 API 认证。
Usage Guidance
Before installing or enabling this skill: 1) Ask the publisher to correct the inconsistencies (short description claiming attachment support vs SKILL.md/code saying attachments are NOT supported; registry metadata claiming no credentials vs package requiring apiToken). 2) Only provide a Sendflare API token if you trust the publisher and after reviewing the Sendflare-sdk-ts npm package (check its source and maintainers). 3) The code currently hardcodes the 'from' address to '[email protected]' (TODO to read from config) — verify and configure a verified sender domain in Sendflare to avoid delivery/auth failures. 4) Don’t assume the SKILL.md privacy claim (encrypted storage) without platform guarantees — ask how/where credentials are stored and whether they are encrypted at rest. 5) If you proceed, test in a restricted/sandboxed agent with a limited-scope API token, and rotate the token afterwards if you stop using the skill. If the author cannot explain/resolve the description/metadata mismatches, treat the package with caution.
Capability Analysis
Type: OpenClaw Skill
Name: sendflare-skill
Version: 1.0.7
The Sendflare Skill bundle is a legitimate implementation for sending emails and managing contacts via the Sendflare SDK. The code logic in `index.js` and `sendflare-client.js` aligns with the documentation, using the provided `apiToken` to interact with the official Sendflare API. Network permissions are properly restricted to `api.sendflare.com` in `skill.yaml`, and there is no evidence of data exfiltration, malicious execution, or harmful prompt injection.
Capability Assessment
Purpose & Capability
The package implements sending email and contact management via a Sendflare SDK and declares an apiToken/appId configuration in package/skill.yaml and config.schema.json. However the top-level registry metadata lists no required env vars/credentials and the skill's short description (in the prompt) claims attachment support while the SKILL.md, README and code explicitly state '不支持发送附件' (attachments not supported). These mismatches are incoherent and should be clarified by the author.
Instruction Scope
SKILL.md and code limit actions to parsing user messages and calling the Sendflare SDK. The instructions do not request unrelated files or extra credentials. However the SKILL.md asserts '所有 API 凭证均加密存储' but the code only stores config in memory during initialization (no evidence in-repo of encryption or persistence). Also some TODOs (e.g. 'from' address read-from-config, appId for contacts) indicate incomplete behavior rather than malicious scope creep.
Install Mechanism
There is no platform install spec, but package.json and package-lock.json declare a dependency on 'Sendflare-sdk-ts' from the npm registry. This is expected for a Sendflare SDK-based skill, but it means an external npm package will be pulled at install time; the skill does not download arbitrary archives or use obscure URLs. Verify the Sendflare-sdk-ts package source before installing.
Credentials
The skill legitimately requires a Sendflare API token (apiToken) and optionally appId for contact operations. Those are the only credentials referenced in code/package files. However the registry metadata incorrectly lists no required env vars/credentials which is inconsistent and could mislead users into installing without providing the necessary token. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request 'always: true' or other elevated/system-wide privileges. It has declared network permission to talk to api.Sendflare.com in skill.yaml. It does not attempt to modify other skills or system config in the provided sources.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sendflare-skill - After installation, invoke the skill by name or use
/sendflare-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- Expanded usage instructions with examples for sending邮件,联系人管理, and help.
- Added troubleshooting section for common authentication and sending issues.
- Provided a privacy statement clarifying credential and info handling.
- Updated configuration requirements table with clearer mandatory/optional indications.
- Clarified feature limitations, daily send quota, and HTML email support.
- Added API documentation link; reorganized structure for better clarity.
v1.0.6
- Documentation was simplified: the detailed SKILL.md was removed and replaced with a more concise version.
- Feature table now clearly indicates experimental status and config requirements for contact management.
- Outdated installation and usage examples were trimmed or condensed.
- Notes and limitations around API Token, sender validation, and attachment support remain.
- Overall user guidance is now more focused and streamlined.
v1.0.5
- 支持多AppId，调用者可通过参数传入对应 AppId。
- 支持多发信人和发信域名，要求调用者传参且需提前完成域名 DNS 认证。
- 明确当前版本发信暂不支持添加附件，并在相关描述和用法中加以说明。
- 技能配置说明已移除 AppID，仅保留必填 apiToken。
v1.0.4
- 配置说明中移除了 appId 和 from 参数，仅需填写 apiToken。
- 其他内容保持不变。
v1.0.3
- 更新配置说明，现在 appId 和 from 参数为必填项
- 文档表格中新增 from 配置项及说明
- 其他内容未更改
v1.0.2
- 新增了可选配置参数 from（发信人）到技能设置说明。
- 其余内容保持不变，无其他功能或文档调整。
v1.0.1
- 移除了“支持 HTML 格式的邮件内容”以外的注意事项说明（如附件支持需额外配置）。
- 简化了“注意事项”部分，减少了细节条目。
- 其他内容保持不变。
v1.0.0
Sendflare Skill 1.0.0 – Initial Release
- 支持通过 Sendflare SDK 发送电子邮件，包括 CC/BCC 功能
- 提供联系人列表获取、保存/更新、删除等管理操作
- 安全的 API Token 认证，全部参数配置说明
- 完善的 TypeScript 类型定义，支持 HTML 邮件与附件
- 包含故障排除、隐私安全与使用限制说明
Metadata
Frequently Asked Questions
What is Sendflare?
通过 Sendflare SDK 发送带附件的电子邮件，管理联系人列表，支持 CC/BCC 和安全 API 认证。 It is an AI Agent Skill for Claude Code / OpenClaw, with 287 downloads so far.
How do I install Sendflare?
Run "/install sendflare-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Sendflare free?
Yes, Sendflare is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Sendflare support?
Sendflare is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Sendflare?
It is built and maintained by keepchen (@keepchen); the current version is v1.0.7.
More Skills