← 返回 Skills 市场

Custom Smtp Sender

Name: Custom Smtp Sender
Author: scccmsd

作者 scccmsd · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1710

总下载

当前安装

版本数

在 OpenClaw 中安装

/install custom-smtp-sender

功能描述

A skill to send emails with support for markdown, HTML text, and attachments, leveraging existing SMTP configuration in `/home/bb/.openclaw/smtp-config.json`. Includes retry logic and logging.

使用说明 (SKILL.md)

Custom SMTP Sender

Custom skill to send emails with advanced options including HTML/Markdown conversion, attachments, and retry handling. Integrates existing configuration, ensuring secure and reliable operations.

Features

HTML/Markdown support: Compose emails using markdown converted to HTML.
Attachments: Include one or more files easily.
Retries: Attempts to resend in case of temporary failures.
Logging: Maintains a log of sent emails and errors for auditing.

Prerequisites

SMTP Configuration File: smtp-config.json located at /home/bb/.openclaw/

Example:

{
  "server": "smtp.exmail.qq.com",
  "port": 465,
  "username": "[email protected]",
  "password": "your-password",
  "emailFrom": "[email protected]",
  "useTLS": true
}

Ensure file permissions are secured (chmod 600).

Usage

Send a basic email:

custom-smtp-sender send --to "[email protected]" --subject "Hello" --body "你好"

Send an HTML email with an attachment:

custom-smtp-sender send \
  --to "[email protected]" \
  --subject "Weekly Report" \
  --body "**Important updates inside.** See attached." \
  --html \
  --attachments path/to/file.pdf

Error Handling

The tool retries up to 3 times on failure, logging each attempt. Networking or credential issues are reported in detail.

Future Expansion

Support for CC/BCC fields
Scheduling emails (cron integration)
Email templates

Set up your SMTP-service once, and you’re ready to integrate email into your workflow!

安全使用建议

This skill is internally inconsistent in ways that matter for security. Before installing or running it: 1) Review and confirm the SMTP config file path and contents — the code reads /home/bb/.openclaw/smtp-config.json and will use whatever credentials are stored there; ensure that's intended and secured. 2) Don't assume retries or logging exist — the code lacks retry logic and explicit logging despite SKILL.md claims. 3) The SKILL.md references a 'custom-smtp-sender' CLI but only a Python script is provided; you will need to run the script directly or create a wrapper. 4) Treat attachments/body-file behavior carefully: the script will read any local file you point it to and send it over the network; only attach files you trust. 5) If you want to use this skill, consider editing the code to (a) accept a configurable config path or environment variables instead of a hard-coded /home/bb path, (b) add explicit retry and logging as promised, and (c) validate/limit attachment paths. 6) If you are unsure about the source, run it in an isolated environment or container and inspect/modify the code before providing any credentials.

功能分析

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The skill is designed to send emails using a specified SMTP configuration. It reads SMTP credentials from `/home/bb/.openclaw/smtp-config.json` and sends user-provided email body content and attachments to a specified recipient via the configured SMTP server. All file access (for configuration, email body, and attachments) and network communication (SMTP) are directly aligned with the stated purpose of an email sender. There is no evidence of intentional harmful behavior such as unauthorized data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent in `SKILL.md`.

能力评估

⚠ Purpose & Capability

The skill's stated purpose (sending email via existing SMTP config) matches the code's behavior (email_sender.py reads /home/bb/.openclaw/smtp-config.json and uses smtplib). However the registry metadata claimed no required config paths or credentials, which is incorrect: the code will unconditionally read a user-specific config file containing SMTP username/password. Also the SKILL.md shows a CLI called 'custom-smtp-sender' but no wrapper/installation is provided — the repository only contains a Python script, so the promised CLI name and distribution are inconsistent.

⚠ Instruction Scope

SKILL.md describes retries, logging, and advanced behavior, but the provided email_sender.py contains no retry logic and no explicit logging/audit trail. The runtime instructions encourage attaching arbitrary files; while that is expected for an email sender, the skill will read arbitrary local files passed as attachments (and a body-file) and transmit them — the metadata did not declare that file access/exfiltration capability. The instructions also reference a specific config path (/home/bb/.openclaw/smtp-config.json) that is not declared in the registry.

ℹ Install Mechanism

No install spec is provided (instruction-only), which reduces supply-chain risk. However the package includes a Python script intended to be run as a CLI; there is no installer or wrapper that provides the 'custom-smtp-sender' command referenced in SKILL.md. Users would need to run the script directly or create their own wrapper.

⚠ Credentials

The skill requires SMTP credentials (username/password) stored in a local JSON file, but the registry metadata lists no required credentials or config paths. That is a material omission: the skill will access a sensitive local file without declaring it. Requesting a file containing SMTP credentials can be legitimate for an email sender, but the lack of disclosure and the hard-coded, user-specific path (/home/bb/...) are disproportionate and surprising.

✓ Persistence & Privilege

The skill does not request persistent/autonomous privileges (always: false) and does not modify other skills or system-wide settings. It does perform network I/O (SMTP) when invoked, which is expected for its purpose.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install custom-smtp-sender
安装完成后，直接呼叫该 Skill 的名称或使用 /custom-smtp-sender 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of custom-smtp-sender: - Send emails via an existing SMTP configuration file. - Supports markdown-to-HTML conversion and sending HTML-formatted messages. - Allows attaching multiple files to emails. - Implements retry logic for temporary send failures. - Logs sent messages and errors for auditing and troubleshooting.

元数据

Slug custom-smtp-sender

版本 1.0.0

许可证 —

累计安装 6

当前安装数 3

历史版本数 1

常见问题