← Back to Skills Marketplace
pjotrglushkov-byte

Agentmail To

by pjotrglushkov-byte · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
253
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install agentmail-to
Description
Управление агентскими email через agentmail.to: создание, чтение, отправка и очистка временных почтовых ящиков через API и веб-консоль.
README (SKILL.md)

SKILL.md - agentmail-to

Работа с сервисом agentmail.to для управления агентскими почтами. Используйте для создания, чтения, отправки и управления временными/агентскими email адресами через API или веб-интерфейс.

Конфигурация

API ключ хранится в: /home/pit/.openclaw/workspace/scripts/.env.agentmail

Переменные окружения

AGENTMAIL_API_KEY=am_us_9c78f14e6adbd64bae61ad49513bd13d7e0c3b7ff9002a6b8651c58b386165fc
[email protected]

Команды

Проверить почту (список сообщений)

python3 /home/pit/.openclaw/workspace/scripts/swaudiobot_smart_reply.py --check-inbox

Отправить ответ

python3 /home/pit/.openclaw/workspace/scripts/swaudiobot_smart_reply.py --send-reply \x3Cinbox_id> \x3Cto> \x3Csubject> \x3Ctext>

Создать новый ящик

python3 /home/pit/.openclaw/workspace/scripts/create_clean_inbox.py

Скрипты

  • swaudiobot_smart_reply.py — Умная обработка писем с эскалацией
  • agentmail_client.py — Базовый клиент для работы с API
  • clear_agentmail.py — Очистка ящика от старых сообщений
  • create_clean_inbox.py — Создание нового чистого ящика

Веб-интерфейс

Консоль: https://console.agentmail.to
Документация: https://docs.agentmail.to/quickstart

Usage Guidance
This skill contains hard-coded secrets and references absolute local paths and scripts that are not bundled — install only after taking these steps: 1) Do not use the embedded API key or config.json credentials; assume they are leaked and rotate any matching keys. 2) Ask the publisher for the missing scripts (swaudiobot_smart_reply.py, create_clean_inbox.py, etc.) and review their source before allowing execution. 3) Remove hard-coded secrets from SKILL.md/config.json and instead provide credentials via an external secret store or environment variables you control. 4) Be cautious because the SKILL.md instructs execution of files under /home/pit — on your system the agent could read local files at those paths if they exist. 5) Prefer to run this skill in an isolated environment or sandbox, and verify the origin of the package (source is unknown) before enabling autonomous invocation.
Capability Analysis
Type: OpenClaw Skill Name: agentmail-to Version: 1.0.0 The skill bundle contains hardcoded sensitive credentials, including an AgentMail API key and AWS SES SMTP credentials (AKIA...) within SKILL.md and config.json. While the bundle's stated purpose is managing agent emails via api.agentmail.to, hardcoding credentials is a major security vulnerability. Furthermore, several functional scripts referenced in the instructions (e.g., swaudiobot_smart_reply.py and create_clean_inbox.py) are missing from the bundle, preventing a complete security audit of the execution logic.
Capability Assessment
Purpose & Capability
The name/description match agentmail.to functionality, but the skill's instructions and bundled config include unrelated-looking credentials (SMTP/AWS-style key) and absolute local paths. The README and SKILL.md imply scripts under /home/pit/.openclaw/workspace/scripts, yet no such scripts are bundled. The presence of SMTP/AWS credentials in config.json is not justified by the declared simple API-based purpose.
Instruction Scope
SKILL.md tells the agent to run Python scripts at absolute paths (/home/pit/.openclaw/workspace/scripts/...) and to read an .env file at that path. Those paths reference local user data and secrets. The skill instructs concrete commands that will access local files and API keys, but the referenced scripts are not included in the package, so their behavior is unknown. The SKILL.md also contains an explicit API key value and example env vars embedded in the instructions, which is a direct secret exposure.
Install Mechanism
There is no install spec (instruction-only), which is low-risk for arbitrary code download. The README suggests installing 'browser-use' via pip, but no automated installer is present. Because the skill relies on running local scripts, the lack of included runtime code means the agent may attempt to execute files on the host if they exist — review host scripts before allowing execution.
Credentials
The SKILL.md and config.json embed an AGENTMAIL_API_KEY and an AGENTMAIL_INBOX, but the skill metadata declares no required env vars or config paths. config.json additionally contains smtp_server, smtp_port, username starting with 'AKIA...' (looks like an AWS access key ID), and a password field — credentials unrelated to simple agentmail.to API calls. This is disproportionate and unexplained.
Persistence & Privilege
always is false and the skill is not marked forcibly persistent. Autonomous invocation is allowed (default) — normal for skills. There is no evidence the skill attempts to modify other skills or system-wide agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install agentmail-to
  3. After installation, invoke the skill by name or use /agentmail-to
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of agentmail-to skill: - Provides tools for creating, reading, replying, and managing temporary/agent email addresses via API or web interface. - Configuration details and environment variables included for API integration. - Lists commands for checking inbox, sending replies, and creating new inboxes. - Describes included scripts for smart email processing and inbox management. - Links to web console and official documentation provided.
Metadata
Slug agentmail-to
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Agentmail To?

Управление агентскими email через agentmail.to: создание, чтение, отправка и очистка временных почтовых ящиков через API и веб-консоль. It is an AI Agent Skill for Claude Code / OpenClaw, with 253 downloads so far.

How do I install Agentmail To?

Run "/install agentmail-to" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Agentmail To free?

Yes, Agentmail To is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Agentmail To support?

Agentmail To is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Agentmail To?

It is built and maintained by pjotrglushkov-byte (@pjotrglushkov-byte); the current version is v1.0.0.

💬 Comments