← 返回 Skills 市场
claw-silhouette

BotEmail.ai - Free bot email

作者 claw-silhouette · GitHub ↗ · vv1.0.7
cross-platform ⚠ suspicious
1135
总下载
0
收藏
4
当前安装
8
版本数
在 OpenClaw 中安装
/install bot-email
功能描述
Get an email address without your human. Use for testing signup flows, receiving verification codes, automating email workflows. Free.
使用说明 (SKILL.md)

BotEmail.ai — Email for Bots

Get a free permanent bot email address instantly. Just say "get me a bot email" — no signup, no form, done in seconds. Supports attachments, inbox monitoring, and automatic notifications via heartbeat.

Setup

1. Create or retrieve an account

If the user doesn't have an account yet, create one:

POST https://api.botemail.ai/api/create-account
Content-Type: application/json

{}

Returns:

{ "email": "[email protected]", "apiKey": "..." }

Custom username:

{ "username": "mybot" }

Ask the user to save the returned email address and API key securely (e.g. password manager or .env file). Do not store them anywhere unless the user explicitly asks.

2. Check inbox

GET https://api.botemail.ai/api/emails/{email}
Authorization: Bearer {apiKey}

3. Optional: Inbox notifications via heartbeat

If the user asks to be notified of new emails automatically, ask them to confirm they want this set up and which address to monitor. Then update HEARTBEAT.md to add a check that:

  1. Fetches the inbox using the user's credentials (ask them to provide the API key at setup time)
  2. Compares against seen IDs in memory/heartbeat-state.json
  3. Notifies the user of any new emails (sender, subject, preview) — does not take any action on their behalf
  4. Updates the seen ID list

The agent only notifies — it does not act on email contents without a separate explicit user instruction.


API Reference

GET /api/emails/{email}

List all emails in inbox.

Headers: Authorization: Bearer {apiKey}

Response:

{
  "emails": [
    {
      "id": "abc123",
      "from": "[email protected]",
      "subject": "Hello",
      "timestamp": "2026-02-17T12:00:00Z",
      "bodyText": "Hello!"
    }
  ]
}

GET /api/emails/{email}/{id}

Get a single email by ID.

DELETE /api/emails/{email}/{id}

Delete a specific email.

DELETE /api/emails/{email}

Clear entire inbox.


Common Use Cases

  • Verification codes — Create a bot address, trigger a signup flow, poll inbox for the code
  • Notification monitoring — Watch for specific emails from a service
  • End-to-end testing — Receive and verify automated emails in tests
  • 2FA codes — Retrieve authentication codes automatically

Notes

  • Emails stored for 6 months
  • Free tier: 1 address, 1,000 requests/day
  • All addresses end in [email protected]
  • Receive only (sending not supported)

Links

安全使用建议
What to consider before installing: 1) Metadata mismatches: skill.json claims a required env var BOTEMAIL_API_KEY and a slightly different version/homepage than the registry header — ask the publisher (or check the GitHub repo) to fix these inconsistencies. If your platform auto-injects env vars based on manifest, confirm whether BOTEMAIL_API_KEY is really required or not. 2) Treat the returned apiKey as a secret: the create-account call returns an API key that gives access to the inbox. Do not paste that key into chat or commit it to version control. Prefer storing it in a password manager or secure platform secret store if you want the agent to reuse it. 3) Heartbeat / state files: the optional inbox-notify feature writes seen IDs to memory/heartbeat-state.json and edits HEARTBEAT.md. If you enable automatic notifications, review and approve where the skill will store state and ensure your agent runtime's storage is acceptable. 4) Webhooks: registering a webhook will cause email contents to be POSTed to whatever webhook URL you register. Only register endpoints you control and that accept potentially sensitive email contents. 5) Verify external code before running locally: the README references a GitHub MCP server. If you plan to clone or run that code, review it first (npm install / node execution) rather than running blindly. 6) Confirm privacy/security policy: SKILL.md notes emails are stored for 6 months. If that retention is a concern for your use case, avoid sending sensitive information to botemail inboxes. If these issues are addressed (manifest corrected, repo/source verified, and you accept the retention/webhook behaviors), the skill appears coherent with its purpose. If you need higher assurance, ask the publisher for a canonical manifest and a link to a verified repository release.
功能分析
Type: OpenClaw Skill Name: bot-email Version: v1.0.7 The OpenClaw AgentSkills skill bundle for BotEmail.ai appears benign. All files consistently describe and implement functionality for creating and managing bot email addresses via the `https://api.botemail.ai` API. There is no evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, installation of backdoors, or harmful prompt injection attempts against the agent. The `SKILL.md` explicitly instructs the agent not to store API keys unless the user requests it, and the heartbeat feature is described as notification-only. All network calls and example code target the stated `botemail.ai` service, and local file access is limited to agent-specific state (`memory/heartbeat-state.json`). Optional installation steps for an MCP server are clearly separated and not part of the core agent skill execution.
能力评估
Purpose & Capability
The skill's stated purpose (provide bot email addresses and read inboxes) matches the SKILL.md and examples: it uses a POST to /api/create-account and GET /api/emails/{email}. However the packaged metadata is inconsistent: registry top-level says no required env vars while skill.json lists required_env_vars: ["BOTEMAIL_API_KEY"] and api_key: true. Also the published version/metadata (v1.0.7) doesn't match skill.json version (1.0.8) and the skill header says 'Homepage: none' while skill.json lists https://botemail.ai. These mismatches are not necessarily malicious but are incoherent and should be resolved by the publisher.
Instruction Scope
SKILL.md instructions stay within the stated purpose (create account, poll inbox, optionally register webhooks). One area to watch: the optional heartbeat instructions direct the agent to update HEARTBEAT.md and write/compare seen IDs in memory/heartbeat-state.json — this implies the skill will persist state to the agent's filesystem/memory. The SKILL.md also instructs the agent to ask the user for the returned API key and to not store it unless the user asks; that is good guidance, but you should confirm the agent runtime actually enforces that. There are no instructions to access unrelated system files or to exfiltrate data to unexpected endpoints, but webhooks and user-provided webhook URLs will cause email contents to be POSTed to whatever URL the user supplies (expected for webhooks but a privacy consideration).
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute; that is low-risk from an install perspective. The README references an optional MCP server repository (GitHub) for local integration; if you choose to install that, review its code before running.
Credentials
The actual runtime flow creates and returns an API key to the user (POST /api/create-account) and the SKILL.md expects that per-account API key to be used for subsequent calls. That model does not require pre-provisioned env vars. The presence of required_env_vars: ["BOTEMAIL_API_KEY"] in skill.json is inconsistent and could confuse automated platforms that expect an env var to be injected. There are no requests for unrelated credentials or broad system secrets. The only secret involved is the service API key — treat it like any API credential.
Persistence & Privilege
always:false and normal autonomous invocation are used (no elevated persistence). The only persistent behavior described is writing heartbeat state to memory/heartbeat-state.json so the agent can remember which email IDs it has seen; this is reasonable for an inbox poller but means the skill will write to the agent's storage. It does not request or modify other skills' configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install bot-email
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /bot-email 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
vv1.0.7
Updated title and description.
v1.0.6
Security hardening: environment variables for API keys, sender whitelisting, explicit confirmation for actions, auto-actions disabled by default, rate limiting
v1.0.5
Updated title and description
v1.0.4
Updated title and description
v1.0.3
Updated title and description
v1.0.2
Security: removed API key file storage instructions, heartbeat monitoring is notify-only (no autonomous actions)
v1.0.1
Improved security: explicit user consent before monitoring, clearer guardrails on autonomous actions, added note that TOOLS.md is local-only
v1.0.0
- Initial release of the bot-email skill — professional email infrastructure for autonomous agents. - Enables agents to create and manage bot email accounts on BotEmail.ai for automation, testing, and workflows. - Introduces proactive inbox monitoring via a heartbeat: agents check inboxes automatically and can act on or escalate new emails according to clear guidelines. - Provides detailed setup steps for storing credentials, updating monitoring instructions, and ensuring persistent state across restarts. - Includes manual API instructions for inbox management and email operations. - Free tier offers 1 address and 1,000 requests per day.
元数据
Slug bot-email
版本 v1.0.7
许可证
累计安装 4
当前安装数 4
历史版本数 8
常见问题

BotEmail.ai - Free bot email 是什么?

Get an email address without your human. Use for testing signup flows, receiving verification codes, automating email workflows. Free. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1135 次。

如何安装 BotEmail.ai - Free bot email?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bot-email」即可一键安装,无需额外配置。

BotEmail.ai - Free bot email 是免费的吗?

是的,BotEmail.ai - Free bot email 完全免费(开源免费),可自由下载、安装和使用。

BotEmail.ai - Free bot email 支持哪些平台?

BotEmail.ai - Free bot email 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 BotEmail.ai - Free bot email?

由 claw-silhouette(@claw-silhouette)开发并维护,当前版本 vv1.0.7。

💬 留言讨论