← 返回 Skills 市场

Clank Email Monitor

Name: Clank Email Monitor
Author: t3mr0i

作者 t3mr0i · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

112

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clank-email-monitor

功能描述

Monitor email inboxes for important messages and get alerts. Works with AgentMail, Gmail, and any IMAP inbox.

使用说明 (SKILL.md)

Email Monitor Skill

Monitor your email inboxes and get alerts for important messages.

Features

Multi-Inbox Support – Monitor multiple email addresses
Keyword Alerts – Get notified when specific keywords appear
Priority Detection – Automatically prioritize important emails
Digest Mode – Daily/weekly email summaries
Auto-Reply – Optional automatic responses for urgent messages

Usage

# Check inbox for new messages
email-monitor check

# Set up keyword alerts
email-monitor alert add "urgent" "invoice" "deadline"

# Generate daily digest
email-monitor digest --daily

# Monitor in background (cron)
email-monitor watch --interval 5m

Installation

clawhub install email-monitor

Configuration

Create ~/.email-monitor/config.json:

{
  "inboxes": [
    {
      "name": "work",
      "provider": "agentmail",
      "api_key": "your_key",
      "inbox_id": "[email protected]"
    }
  ],
  "alerts": {
    "keywords": ["urgent", "invoice", "deadline"],
    "notify": ["telegram", "email"]
  },
  "digest": {
    "enabled": true,
    "time": "08:00",
    "timezone": "UTC"
  }
}

Requirements

Node.js >= 20
AgentMail API key OR IMAP credentials
OpenClaw (for notifications)

License

MIT

安全使用建议

This skill's SKILL.md clearly requires API keys or IMAP/SMTP credentials and asks you to create a config file in your home directory, but the registry metadata does not declare those requirements — that's an inconsistency you should resolve before installing. Before you proceed: 1) Ask the publisher for a proper install spec and the exact package/source for 'clawhub install email-monitor'. 2) Confirm where credentials are stored and whether they are encrypted or stored in plaintext; prefer OS keyrings or environment-scoped secrets instead of a plaintext JSON file. 3) Inspect the package contents (or run in an isolated VM/container) before giving credentials. 4) Limit the credentials you provide (use least privilege, create dedicated test account or read-only IMAP where possible) and avoid providing master account credentials. 5) Disable or carefully review auto-reply behavior to prevent accidental outgoing messages. 6) If you rely on Telegram/email notifications, verify what tokens the skill needs and why. If the publisher cannot explain the discrepancies (missing required env/config declarations and missing install details), do not install.

功能分析

Type: OpenClaw Skill Name: clank-email-monitor Version: 1.0.0 The skill bundle contains only metadata and documentation (SKILL.md) for an email monitoring tool. No executable code is provided, and the documentation describes standard, legitimate functionality such as IMAP/API monitoring and keyword alerts without any signs of malicious intent or prompt injection.

能力评估

⚠ Purpose & Capability

The name/description match the behavior (email monitoring, alerts, auto-reply). However the SKILL.md requires AgentMail API keys or IMAP credentials and a config file at ~/.email-monitor/config.json, while the registry metadata lists no required env vars, no required config paths, and no primary credential. That mismatch is unexplained and disproportionate.

⚠ Instruction Scope

The runtime instructions tell the user/agent to create a config file containing API keys/IMAP credentials, run/install an 'email-monitor' CLI, run a background watch job, and optionally perform auto-replies and send notifications to external channels (Telegram, email). Those actions involve collecting and persisting sensitive credentials and sending outbound messages — all of which are broader than the registry claims and could be abused if not implemented carefully.

ℹ Install Mechanism

There is no install spec in the registry, yet SKILL.md suggests installing via 'clawhub install email-monitor' and requires Node.js >= 20. Because no code or package was included for review, the actual install source, what gets written to disk, and what network endpoints the installer contacts are unknown. This increases risk but may be legitimate if the package is available from a trusted repository.

⚠ Credentials

The skill requires sensitive secrets (AgentMail API key or IMAP/SMTP credentials) and will persist them to ~/.email-monitor/config.json according to the instructions, but the registry metadata did not declare any required credentials or config paths. The SKILL.md also references notifications via Telegram or email which may require additional tokens. Requesting and storing these secrets without explicit declaration or guidance on secure storage is disproportionate.

ℹ Persistence & Privilege

The skill is not forced-always and does not request special platform privileges. However it instructs creating a persistent config file in the user's home that contains credentials and may run persistent background monitoring (cron/watch). Persisting secrets locally increases the long-term blast radius if the package or host is compromised.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clank-email-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /clank-email-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of email-monitor skill: - Monitor multiple email inboxes (AgentMail, Gmail, or any IMAP) - Set up customizable keyword alerts for important messages - Automatic detection and prioritization of high-importance emails - Daily or weekly email digests with summary of received messages - Optional auto-reply feature for urgent emails - Flexible notification options (e.g., Telegram, email)

元数据

Slug clank-email-monitor

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题