Near Email Reporter

Send NEAR reports and alerts via email with SMTP configuration, scheduling, and automatic reporting.

This skill appears coherent but review and take these precautions before installing: 1) Inspect the script (scripts/emailer.js) yourself — it stores SMTP credentials in ~/.near-email/config.json and will query rpc.mainnet.near.org. 2) Use an app-specific or limited-scope SMTP password (e.g., Gmail App Passwords) rather than your primary account password. 3) Confirm config permissions (mode 600) and that the config file is stored where you expect. 4) The skill does not include nodemailer; run npm install in a controlled environment and review that dependency before use. 5) Scheduling requires an external scheduler or background process — ensure you don't run persistent jobs with elevated privileges. 6) Because the skill source and publisher are unknown, prefer running it in a restricted environment or container until you are comfortable with the code.

Type: OpenClaw Skill Name: near-email-reporter Version: 1.0.0 The skill's code and documentation align with its stated purpose of configuring email settings and fetching NEAR account data. SMTP credentials are saved to `~/.near-email/config.json` with secure `0o600` permissions. The `scripts/emailer.js` file explicitly notes that email sending functionality requires `nodemailer` to be installed and integrated, meaning the provided code does not actually send emails or exfiltrate data. Network activity is limited to legitimate NEAR RPC endpoints for querying account balances. There is no evidence of prompt injection, malicious execution, or unauthorized data exfiltration.