← 返回 Skills 市场

Agnic Agent Email

Name: Agnic Agent Email
Author: agnicpay-prog

作者 Agnic.AI · GitHub ↗ · v2.0.2 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agnic-agent-email

功能描述

Send and receive email as your AI agent. Use when the user wants to check inbox, send email, reply to messages, set up an email alias, or manage agent email....

使用说明 (SKILL.md)

Agent Email

Each agent gets a unique email address in the format agent-\x3Cid>@agnic.ai. Use npx agnic@latest email commands to manage it.

Authentication

Run npx agnic@latest status --json to verify. If not authenticated:

Headless (CI/server/agent): Set AGNIC_TOKEN env var or pass --token \x3Ctoken>
Interactive (has browser): Run npx agnic@latest auth login

See the authenticate-wallet skill for details.

Commands

Set up email alias

npx agnic@latest email setup --display-name "My Agent" --json

Check email address

npx agnic@latest email address --json

Check inbox

npx agnic@latest email inbox --limit 10 --json

Send email

npx agnic@latest email send --to \x3Caddress> --subject "\x3Csubject>" --body "\x3Cbody>"

Reply to a message

npx agnic@latest email reply --message-id \x3Cid> --body "\x3Creply text>"

Input Validation

Before constructing commands, validate user-provided values:

--to: Must be a valid email address. Reject if it contains spaces, semicolons, pipes, or backticks.
--subject: Single-quote the value. Escape internal single quotes.
--body: Single-quote the value. Escape internal single quotes.
--message-id: Must be alphanumeric or UUID format.

Do not pass unvalidated user input into the command.

Important Notes

Emails are stored with 30-day retention
Display name can be set once during setup
Inbox returns most recent messages first

Prerequisites

Must be authenticated (npx agnic@latest status to check)
Agent identity must exist (created automatically during sign-up)

Error Handling

Common errors:

"Not authenticated" -- Run npx agnic@latest auth login or set AGNIC_TOKEN
"No email alias found" -- Run npx agnic@latest email setup first
"Agent not found" -- The user may not have an agent registered; sign up at app.agnic.ai
"Message not found" -- Check the message ID with email inbox first

安全使用建议

This skill appears to be a thin wrapper around the agnic CLI. Before installing: 1) Confirm you trust the 'agnic' npm package and consider pinning a specific version rather than using @latest; npx will download and run remote code. 2) Expect to provide a sensitive AGNIC_TOKEN for headless use—verify where that token is sent, what scopes it has, and whether you can rotate/revoke it. 3) Note emails are retained 30 days—ensure this retention and privacy model fit your needs. 4) If you need stronger assurances, ask the skill author to declare AGNIC_TOKEN in requires.env, document the npm package provenance, and prefer a fixed release (not @latest).

功能分析

Type: OpenClaw Skill Name: agnic-agent-email Version: 2.0.2 The skill provides a legitimate interface for an AI agent to manage emails via the 'agnic' CLI tool. It includes explicit security instructions in SKILL.md for the agent to validate and escape user input (e.g., --to, --subject, --body) to prevent shell injection, demonstrating a security-conscious design aligned with its stated purpose.

能力标签

cryptorequires-walletrequires-sensitive-credentials

能力评估

ℹ Purpose & Capability

Name/description align with the runtime instructions: all commands use the agnic CLI (npx agnic@latest email ...). The requested capabilities (check inbox, send/reply, set alias) are consistent with calling that CLI.

ℹ Instruction Scope

SKILL.md restricts actions to calling the agnic CLI and includes reasonable input validation guidance. It does not instruct reading unrelated files or system state. However, it explicitly references an authentication token (AGNIC_TOKEN) and interactive login flows that are not declared in the skill's required env list, an inconsistency worth flagging.

⚠ Install Mechanism

The skill is instruction-only but relies on 'npx agnic@latest' at runtime. npx/@latest will fetch and execute code from the npm registry on-demand; that behavior can change over time and execute arbitrary remote code. For lower risk, commands should prefer pinned versions or document the package source and trust model.

⚠ Credentials

The SKILL.md documents use of a sensitive environment variable (AGNIC_TOKEN) for headless auth, but the skill metadata lists no required env vars or primary credential. This mismatch hides that a secret token may be needed and transmitted to the agnic service; the token scope and storage/rotation expectations are not declared.

✓ Persistence & Privilege

The skill does not request always:true, has no install spec that writes files, and does not request system-level config paths. It does not ask to persist or modify other skills or global agent settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agnic-agent-email
安装完成后，直接呼叫该 Skill 的名称或使用 /agnic-agent-email 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v2.0.2

v2.0.2 — Initial publication from upstream agnic-wallet-skills: - Full production-quality skill with proper frontmatter and input validation - Send and receive email as your AI agent (agent-<id>@agnic.ai alias) - Supports inbox, send, reply, setup, address commands - Headless auth via AGNIC_TOKEN supported

元数据

Slug agnic-agent-email

版本 2.0.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题