← 返回 Skills 市场

163 Email Monitor

Name: 163 Email Monitor
Author: hanyuhh

作者 Emory Sermon · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

163

总下载

当前安装

版本数

在 OpenClaw 中安装

/install 163-email-monitor

功能描述

Connect to 163/126/yeah.net (Coremail) email via IMAP, read inbox, search emails, and send emails via SMTP. Activate when user asks to check email, read mail...

使用说明 (SKILL.md)

163 Email Monitor

Key Insight: Coremail ID Command

163/126/yeah.net use Coremail which requires an IMAP ID command before any mailbox operation, otherwise returns "Unsafe Login" even with valid credentials.

Setup

Prerequisites

Credentials in ~/.openclaw/email-monitor/.env:

IMAP_SERVER=imap.163.com
IMAP_PORT=993
SMTP_SERVER=smtp.163.com
SMTP_PORT=465
[email protected]
EMAIL_PASSWORD=your_auth_code

The EMAIL_PASSWORD is the 授权码 (authorization code), not the login password. Users obtain it from: 163 Mail → Settings → POP3/SMTP/IMAP → Enable IMAP → Get authorization code.

Server Reference

Provider	IMAP Server	SMTP Server
163.com	imap.163.com:993	smtp.163.com:465
126.com	imap.126.com:993	smtp.126.com:465
yeah.net	imap.yeah.net:993	smtp.yeah.net:465

Usage

All operations use scripts/mail_client.py:

# Read unread emails
python3 scripts/mail_client.py read --unread

# Read latest N emails
python3 scripts/mail_client.py read --latest 10

# Search emails by keyword
python3 scripts/mail_client.py search "amazon"

# Search by sender
python3 scripts/mail_client.py search --from "[email protected]"

# Search by date range
python3 scripts/mail_client.py search --since 2026-03-01 --before 2026-03-23

# Send email
python3 scripts/mail_client.py send --to [email protected] --subject "Hello" --body "Content here"

# Send with attachment
python3 scripts/mail_client.py send --to [email protected] --subject "Report" --body "See attached" --attach /path/to/file.pdf

Pass --env /path/to/.env to override default config location.

Troubleshooting

Error	Cause	Fix
`Unsafe Login`	Missing ID command	Use this skill's script (handles automatically)
`AUTHENTICATIONFAILED`	Wrong auth code	Regenerate 授权码 in 163 web settings
`LOGIN failed`	IMAP not enabled	Enable IMAP in 163 Mail → Settings

安全使用建议

This skill appears to implement a legitimate IMAP/SMTP client for 163/126/yeah.net, but it requires your email address and an authorization code stored in a local file (~/.openclaw/email-monitor/.env) even though the registry metadata doesn't declare any required credentials. Before installing or running it: (1) Review the full scripts/mail_client.py file yourself (or have someone you trust audit it) to confirm there are no hidden network calls or logging of credentials. (2) Store the authorization code in a file with strict permissions (chmod 600) or consider using an isolated environment/container. (3) Prefer using the provider's per-app authorization code (as instructed) rather than your main account password; revoke that authorization code in your account settings if you stop using the skill. (4) Be aware the script can send emails (so it could send messages on your behalf if run); only run it from trusted machines. (5) If you want better transparency, ask the publisher to add required-credential metadata (primary credential) and to document how credentials are stored and protected. If you cannot audit the code, treat the skill with caution.

功能分析

Type: OpenClaw Skill Name: 163-email-monitor Version: 1.0.1 The skill is a legitimate email client for NetEase (163/126/yeah.net) services, specifically designed to handle the Coremail-specific IMAP ID command requirement. The code in `scripts/mail_client.py` uses standard Python libraries (imaplib, smtplib) to read, search, and send emails as described, with no evidence of data exfiltration, malicious execution, or hidden prompt injection.

能力评估

ℹ Purpose & Capability

The code and SKILL.md implement an IMAP/SMTP client tailored to Coremail (adds the required ID command) which matches the skill name and description. However the registry metadata lists no required credentials or primary credential, while the runtime instructions require a local .env file containing email address and authorization code — a mismatch between declared requirements and actual needs.

ℹ Instruction Scope

SKILL.md and the script limit operations to connecting to IMAP/SMTP, reading/searching mailbox and sending mail. The script reads a local config file (~/.openclaw/email-monitor/.env) for credentials and may print message previews or JSON to stdout. There are no instructions to access unrelated system files or external endpoints beyond IMAP/SMTP, and no evidence of data exfiltration in the provided code.

✓ Install Mechanism

No install spec — instruction-only plus a Python script. Nothing in the manifest downloads or executes remote installers; risk from install mechanism is low.

ℹ Credentials

The skill requires the user's email address and an authorization code (授权码) to function, which is proportionate to its purpose. But those secrets are expected in a local .env file rather than in declared required env vars/primary credential, and the registry metadata does not advertise this requirement — the omission reduces transparency about what sensitive data the skill needs.

✓ Persistence & Privilege

The skill is not always-enabled and has no install-time persistence or system-wide config changes. Autonomous invocation is allowed (platform default), but that alone is not a red flag here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install 163-email-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /163-email-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Security improvements: improved error handling, better input validation, detailed documentation, safer connection management

v1.0.0

Initial release: IMAP/SMTP support for 163/126/yeah.net with Coremail ID command fix

元数据

Slug 163-email-monitor

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题