邮件指令定时处理任务。通过 IMAP/SMTP 自动接收并执行邮件中的指令，以邮件形式回复执行结果。适用于：(1) 创建定时任务监控指定邮箱 (2) 通过邮件下发指令给 AI Agent (3) 实现邮件驱动的自动化工作流。需配置：收件邮箱、SMTP/IMAP 配置、指令发件人白名单。

This skill will read a mailbox and can cause your agent to execute instructions embedded in emails; that is powerful but also dangerous if misused. Before installing or running it: - Do not place real/privileged credentials in plaintext config.json or pass them in cron payloads. Use an app-specific token, a dedicated throwaway mailbox, or a secure secret store (OS keychain / secrets manager) and avoid embedding secrets in scheduler payloads or agent turns. - Prefer the provided Python script (fetch/reply) to run in a tightly sandboxed environment and avoid giving the LLM direct authorization to 'execute' commands. If you must automate, restrict the allowed command set to a whitelist of safe operations and implement explicit parsing/validation rather than treating the whole email body as executable instructions. - Avoid scheduling regular autonomous agent turns that include secrets; if using a scheduler, ensure payloads do not contain credentials and that the execution environment enforces strict egress/network controls and logging policies. - Use a dedicated, low-privilege mailbox for testing; rotate credentials often; log and monitor outgoing SMTP activity. - If you want to proceed safely, request changes from the skill author (or modify locally): remove credential embedding in cron payloads, make whitelist_sender an explicit list, implement explicit allowed-command parsing, and store secrets in a secure store. Confidence is high that these are genuine risks (design choices rather than mere bugs). Additional information that would reduce risk: (1) confirmation that the agent never receives credentials in runtime payloads and that only the local script runs (no LLM execution), (2) use of secure secret storage for IMAP/SMTP credentials, and (3) an allowlist of permitted commands with sandboxing for any action the agent performs.

Type: OpenClaw Skill Name: email-cron-handler Version: 1.0.0 The skill bundle implements a remote command execution (RCE) framework that uses email (IMAP/SMTP) as a command-and-control (C2) channel. The instructions in 'SKILL.md' and 'references/01-config-template.md' direct the AI agent to fetch emails from a whitelisted sender and execute the body of those emails as arbitrary instructions, effectively creating a remote shell. While the tool includes a whitelist mechanism and is framed as an automation utility, the combination of external command execution and provided 'cron' templates for persistence creates a high-risk environment similar to a backdoor or remote access trojan (RAT).