Automated email assistant for Apple Mail. Runs on a schedule, scores priority, drafts AI replies, and emails you a report. Manage your inbox from Telegram or...

Plain-language recommendations before you install: - Confirm the missing AppleScript: The Python checker expects a get_unread_emails.scpt file (used to read unread Mail.app messages), but that .scpt is not present in the provided manifest. Ask the author or check the repository for that file; without it the checker will fail. - Understand the privileges you must grant: setup.sh requires you to allow Terminal to control Mail.app and may ask for Full Disk Access if running from cron. That lets the scripts read and send email on your behalf — only grant this on a machine/account you trust for this purpose. - Cron persistence: setup.sh installs a crontab entry so the checker runs on a schedule. If you prefer manual runs, decline crontab installation and run the script manually. If you do install cron, note the skill will run even when you are not actively using the agent. - LLM API keys live on disk: If you select OpenAI or another remote LLM, the API key is stored in config/settings.json. Ensure that file is protected, not in source control, and rotate the key if you stop using the skill. Prefer local LLMs (LM Studio/Ollama) if you don't want keys sent to external APIs. - Review AppleScript string interpolation and inputs: The code constructs AppleScript snippets using subject/to addresses and other fields. This is expected for AppleScript-based Mail control, but if you allow external inputs (via files or agent commands) ensure they are trusted to avoid injection-like issues. - Test in an isolated account: Run the setup and test on a disposable macOS account or VM with a dedicated bot inbox (as suggested in README) before giving it access to your primary email. If you want, I can: (a) search the repo for the missing get_unread_emails.scpt, (b) point out exact lines in the scripts that construct AppleScript or run subprocesses for a closer review, or (c) generate a checklist of settings/permissions to review on macOS before installation.

Type: OpenClaw Skill Name: email-checker-by-entzai Version: 1.1.1 The skill bundle is classified as suspicious due to a command injection vulnerability in `scripts/email/send_reply.py`, where the `--subject` argument is interpolated into an AppleScript string without sanitization, allowing for arbitrary code execution. The bundle also utilizes `osascript` to control Mail.app and modifies system persistence via `crontab` in `setup.sh`. While these capabilities are necessary for the stated purpose of an automated email assistant, the lack of input validation on externally influenced data (like email subjects) creates a significant security risk that could be exploited through indirect prompt injection.