Sunday

Agent identity provider — own email address and E2E-encrypted credential vault. Use when storing or retrieving passwords for services, logging into services with stored credentials, checking email inbox, receiving OTP/verification codes via email, signing up for services, getting your agent's email address, or any task where the agent needs its own identity separate from the user's. Replaces 1Password + AgentMail with a single skill — no desktop app, no tmux, fully autonomous.

Before installing: verify the Homebrew formula and upstream source (inspect the ravi-technologies tap and the sunday formula); confirm there is a trustworthy project repo and privacy/security documentation. Understand that after you run 'sunday auth login' the CLI will store encryption keys and credentials in ~/.sunday/config.json so the agent can access email and decrypted passwords without further prompts — treat that file as high‑value secret material. If you cannot verify the publisher, avoid installing the binary on a machine with other sensitive data (consider a disposable VM/container). Prefer vendors with a public code repo, audited client-side crypto details, and a clear privacy policy. If you proceed, inspect the installed binary and its config file permissions, and consider isolating the agent (restricted user account, minimal file permissions) to reduce risk of secret exposure.

Type: OpenClaw Skill Name: sunday Version: 1.0.1 The skill bundle is benign. It provides clear instructions for an AI agent to manage its own identity, email, and E2E-encrypted credential vault using the `sunday` CLI tool. All commands are transparent, use `--json` for structured output, and are directly aligned with the stated purpose. The `SKILL.md` explicitly guides the agent to use its own identity and vault, not the user's, and emphasizes that credentials are encrypted. There is no evidence of prompt injection, data exfiltration, persistence mechanisms, or other malicious intent within the provided files. The installation of the `sunday` CLI via Homebrew is a standard dependency management practice, and while the external tool itself would require separate auditing for supply chain risks, the skill bundle's instructions are not malicious.