← 返回 Skills 市场
dmoraine

ClawInboxRAG

作者 dmoraine · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
124
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install clawinboxrag
功能描述
Community skill for parsing and executing local mailbox retrieval commands (`mail ...`) against a local backend with safe defaults, bounded output, and read-...
使用说明 (SKILL.md)

ClawInboxRAG (Community Skill)

Parse and execute mail ... commands for a local mailbox retrieval backend.

What this skill does

  • Parses chat commands with scripts/parse_mail.py.
  • Routes allowed actions to scripts/run_cli.sh.
  • Keeps output concise and citation-friendly.
  • Enforces safety constraints (read-only posture, limited command surface, bounded result counts).

Prerequisites

  • Local backend checkout.
  • Working Python environment and uv runner.
  • Gmail OAuth read-only scope.
  • Environment variables:
    • GMAIL_RAG_REPO (required)
    • GMAIL_RAG_UV_BIN (optional, default uv)
    • MAIL_DEFAULT_MODE (hybrid default)
    • MAIL_DEFAULT_LIMIT (5 default)
    • MAIL_MAX_LIMIT (25 default)

Supported input

Trigger: input starts with mail (case-insensitive).

Actions recognized by parser:

  • mail help -> help
  • mail status / mail stat -> status
  • mail labels / mail label -> labels
  • mail sync -> sync
  • mail recents [max|top|limit N] -> recents
  • everything else -> search (if non-empty query remains)

Search options recognized by parser:

  • Mode: keyword, semantic, hybrid (plus localized aliases in parser)
  • Limit: max N, top N, limit N, limite N
  • Label prefix: label \x3Cprefix> or tag \x3Cprefix>
  • Date filters: after \x3Cdate>, before \x3Cdate>, between \x3Cdate> and \x3Cdate>
  • Summary flag: resume (also résume, résumé, summary)

Command mapping

Use scripts/run_cli.sh for execution.

  • help -> return usage guidance (no CLI call required).
  • search -> search \x3Cquery> [--keyword|--semantic|--hybrid] --limit N [--label-prefix X] [--after ISO] [--before ISO]
  • recents -> recents --limit N
  • status -> status
  • labels -> labels
  • sync -> run in order:
    1. ingest-primary --limit 50
    2. embed --limit 200
    3. refresh-labels

Safety constraints

  • Read-only Gmail posture.
  • No credential/token disclosure.
  • No full raw body dumping by default.
  • Clamp numeric limits to configured max.
  • Validate date parsing before CLI options.
  • Use safe argument passing; do not interpolate untrusted shell strings.
安全使用建议
This skill appears to do what it says: parse `mail ...` commands and call a local gmail-rag CLI in read-only mode. Before installing: (1) verify the registry metadata vs SKILL.md — set GMAIL_RAG_REPO and any MAIL_* env vars locally; (2) ensure the Gmail token used by your local backend is truly read-only (no send/delete scopes) and is stored only on your machine; (3) inspect the local backend (the gmail_rag code) that will be executed by run_cli.sh — the skill delegates execution to that repo, so its safety depends on that code; (4) if you plan to allow autonomous agent invocation, be aware the agent could run the wrapper when triggered — keep the token scope limited and the repo under your control. If any of these checks are unclear, treat the skill as untrusted until you confirm the local backend and required env vars.
功能分析
Type: OpenClaw Skill Name: claw-inbox-rag Version: 1.0.0 The ClawInboxRAG skill is a legitimate utility designed to interface with a local Gmail RAG (Retrieval-Augmented Generation) backend. The provided scripts include a Python-based command parser (scripts/parse_mail.py) and a shell wrapper (scripts/run_cli.sh) that enforces an allowlist of subcommands (e.g., search, status, sync) before executing the backend CLI. The skill documentation (SKILL.md, references/security.md) emphasizes safety, read-only access, and bounded output, and no evidence of malicious intent, data exfiltration, or shell injection vulnerabilities was found.
能力评估
ℹ Purpose & Capability
The skill claims to parse `mail ...` commands and run a local gmail-rag backend; the included parser and wrapper scripts match this purpose. Minor inconsistency: the registry metadata lists no required env vars, but SKILL.md/README/setup require GMAIL_RAG_REPO and other MAIL_* env vars — the skill needs a local repo path and runtime config that are not reflected in registry metadata.
✓ Instruction Scope
SKILL.md instructs the agent to parse inputs with scripts/parse_mail.py and to invoke allowed subcommands via scripts/run_cli.sh. The scripts enforce an allowlist of subcommands, check GMAIL_RAG_REPO, and make no direct outbound network calls themselves. The runtime instructions do reference a local Gmail OAuth token (read-only) for the backend, which is appropriate for the stated purpose.
✓ Install Mechanism
No install spec is provided (instruction-only skill plus small helper scripts). Nothing is downloaded from untrusted URLs and no extraction is specified. This is relatively low risk from an install standpoint.
ℹ Credentials
Requested environment/config values (GMAIL_RAG_REPO, optional GMAIL_RAG_UV_BIN, MAIL_DEFAULT_LIMIT, MAIL_MAX_LIMIT) are proportional to a local CLI wrapper. However, the manifest/registry omitted these required env vars while the SKILL.md/README mention them and also mention a Gmail OAuth token path — the skill will effectively rely on local OAuth tokens managed by the backend even though that token path/credential is not declared in the registry. Confirm required env vars before installing.
✓ Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It runs only when invoked and does not attempt to modify other skills or system configuration.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install clawinboxrag
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /clawinboxrag 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
ClawInboxRAG Skill 1.0.0 - Initial Release - Enables safe parsing and execution of local `mail ...` commands for ClawInboxRAG mailbox retrieval. - Supports read-only querying with bounded, citation-friendly output; never exposes full raw message bodies by default. - Includes actions: help, status, labels, sync, recents, and flexible search with advanced options. - Enforces safety constraints on command surface, numeric limits, and argument handling. - Clear error handling for setup, runner, index, and command issues. - Requires a local ClawInboxRAG checkout and proper environment configuration.
元数据
Slug clawinboxrag
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

ClawInboxRAG 是什么？

Community skill for parsing and executing local mailbox retrieval commands (`mail ...`) against a local backend with safe defaults, bounded output, and read-... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 124 次。

如何安装 ClawInboxRAG？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawinboxrag」即可一键安装，无需额外配置。

ClawInboxRAG 是免费的吗？

是的，ClawInboxRAG 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

ClawInboxRAG 支持哪些平台？

ClawInboxRAG 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 ClawInboxRAG？

由 dmoraine（@dmoraine）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论