← 返回 Skills 市场

DropMail – disposable email manager

Name: DropMail – disposable email manager
Author: cprite

作者 Nikolay · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ✓ 安全检测通过

102

总下载

当前安装

版本数

在 OpenClaw 中安装

/install dropmail

功能描述

Manage disposable email addresses using GuerrillaMail. Use when a user wants to create a temporary/throwaway email address, check a disposable inbox for mess...

使用说明 (SKILL.md)

DropMail Skill

Create and manage disposable email addresses via GuerrillaMail API. Emails expire after 60 minutes. All data is stored locally in SQLite at ~/.dropmail/dropmail.db.

Installation

Create a symlink to dropmail.py on your PATH:

# System-wide
ln -s \x3Cskill-dir>/scripts/dropmail.py /usr/local/bin/dropmail

# User-local
ln -s \x3Cskill-dir>/scripts/dropmail.py ~/.local/bin/dropmail

Data is stored at ~/.dropmail/ (auto-created on first run). Requires Python 3.7+, no extra dependencies.

Commands

dropmail new                            # Get a new disposable email
dropmail list                           # List all tracked emails with expiry status
dropmail \x3Cemail> inbox                  # Show all messages in inbox
dropmail \x3Cemail> inbox -c 3             # Show last 3 messages only
dropmail \x3Cemail> refresh                # Fetch new messages from GuerrillaMail API
dropmail \x3Cemail> read \x3Cid>              # Read full body of a message
dropmail \x3Cemail> remove                 # Remove email + all messages from local DB
dropmail \x3Cemail> expire                 # Show time remaining before expiry

Typical Workflow

dropmail new — get a fresh email
Share the email address with the untrusted service
dropmail \x3Cemail> refresh - pull new messages from the server
dropmail \x3Cemail> inbox - browse received messages
dropmail \x3Cemail> read \x3Cid> - read a specific message
dropmail \x3Cemail> remove - clean up when done

Notes

Data location: All data stored in ~/.dropmail/ (DB + sessions). Auto-created on first run.
Sessions: Per-email PHPSESSID cookies stored in ~/.dropmail/sessions.json. Expire after ~18 min of API inactivity.
Offline inbox: Messages are cached locally. inbox reads from cache; refresh syncs from server.
403 errors: GuerrillaMail blocks non-browser User-Agents. The script uses Mozilla/5.0 by default. If blocked, check references/api.md.
Expiry: Emails last 60 minutes. After expiry, old messages are still accessible by calling set_email_user via refresh.

API Reference

For full GuerrillaMail API details, see references/api.md. Load it when:

Debugging API call failures
Adding new API features (extend, delete messages, forget)
Understanding session/cookie handling

安全使用建议

This skill appears to do what it says: create and manage GuerrillaMail disposable addresses and cache messages locally. Before installing, review the full scripts (the provided listing was truncated in the report) and consider: 1) sessions.json stores PHPSESSID tokens — treat that file as sensitive and ensure ~/.dropmail has restrictive permissions; 2) the script falls back to an unverified SSL context if the certifi package is missing, which can make API calls vulnerable to MITM on some systems — install certifi or verify TLS behavior; 3) remove cached data (dropmail remove and delete ~/.dropmail) when you no longer need the addresses. If you cannot review the full file, or you need stronger guarantees about TLS and data handling, consider not installing or running the script in an isolated environment.

功能分析

Type: OpenClaw Skill Name: dropmail Version: 1.0.1 The dropmail skill is a legitimate tool for managing disposable email addresses via the GuerrillaMail API. It implements a CLI and local SQLite database (stored in ~/.dropmail/) to track temporary inboxes and cache messages. The code in scripts/dropmail.py uses standard Python libraries for network requests and database management, and while it includes a fallback to unverified SSL contexts for compatibility, there is no evidence of data exfiltration, malicious execution, or prompt injection attacks.

能力标签

requires-sensitive-credentials

能力评估

✓ Purpose & Capability

Name/description (disposable email via GuerrillaMail) align with the included script and API reference. No unrelated services, binaries, or credentials are requested.

ℹ Instruction Scope

SKILL.md tells the agent to symlink/run the included CLI and describes local storage at ~/.dropmail; the runtime instructions and code focus on API calls, caching, and session handling only. Note: the skill persists PHPSESSID cookies and cached messages to disk (sessions.json and SQLite DB).

✓ Install Mechanism

No install spec — the package is instruction + a single Python script. Nothing is downloaded from arbitrary URLs. The script will be placed on disk when the skill is installed, which is expected for a CLI tool.

ℹ Credentials

The skill requests no environment variables or external credentials (appropriate). However, it stores session cookies (PHPSESSID) locally which are sensitive for the GuerrillaMail sessions and should be protected/cleared when not needed.

✓ Persistence & Privilege

always is false; the skill writes files only under the user's home directory (~/.dropmail) which is proportionate for a local CLI tool. It does not request system-wide privileges or modify other skills.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install dropmail
安装完成后，直接呼叫该 Skill 的名称或使用 /dropmail 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fix: Add SSL context to dropmail.py for macOS compatibility

v1.0.0

Initial release of DropMail skill. - Create and manage disposable email addresses via GuerrillaMail. - Supports creating, listing, refreshing, reading, and removing temporary emails. - Local data storage using SQLite at `~/.dropmail/dropmail.db`. - Inbox messages are cached and can be browsed or read in full. - Handles session and cookie management for each temporary email. - Emails expire after 60 minutes; offline access to cached messages is supported.

元数据

Slug dropmail

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题