← 返回 Skills 市场
1974
总下载
0
收藏
39
当前安装
3
版本数
在 OpenClaw 中安装
/install email-sender
功能描述
Send emails with optional file attachments using a Gmail account via SMTP by specifying recipient, subject, body, and an optional attachment path.
安全使用建议
Install only if you understand that this skill can send email through the bundled Gmail account and attach any file path the agent is allowed to read. Prefer a version that removes the hardcoded password, uses your own securely stored credentials, confirms recipient/body/attachments before every send, and limits attachments to approved workspace paths.
功能分析
Type: OpenClaw Skill
Name: email-sender
Version: 1.0.2
The skill is classified as suspicious primarily due to two significant vulnerabilities. Firstly, the `script.py` file hardcodes the sender's Gmail email address (`[email protected]`) and App Password (`trmilxeajxhqgiqq`), which is a critical security flaw exposing these credentials if the skill bundle is distributed. Secondly, the `attachment_path` parameter in `script.py` and defined in `tools.json` allows the agent to read and attach any file on the system, posing a high risk of data exfiltration if the agent is compromised or maliciously prompted to attach sensitive files.
能力评估
Purpose & Capability
Sending email with attachments is coherent with the stated purpose, but the implementation embeds a specific Gmail address and app password directly in script.py instead of requiring the user to provide credentials securely.
Instruction Scope
The tool accepts arbitrary recipients and an absolute attachment_path, and the artifacts do not show a confirmation step, recipient limits, or attachment path restrictions before sending external email.
Install Mechanism
No installer, package installation, or startup hook is shown; the artifact consists of a small Python script plus OpenClaw tool metadata.
Credentials
Reading a user-selected file and transmitting it by SMTP fits an email attachment tool, but unrestricted absolute paths and missing credential declarations make the authority broader than the documentation adequately scopes.
Persistence & Privilege
No background persistence is present, but the bundled Gmail app password is a reusable delegated credential that grants email-sending privilege to anyone running the skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install email-sender - 安装完成后，直接呼叫该 Skill 的名称或使用
/email-sender触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- No functional changes in this release.
- Documentation update: clarified that the `body` parameter is required.
v1.0.1
- Added _meta.json file for metadata support.
- Updated documentation to clarify that the email body parameter is required.
v1.0.0
- Initial release: send emails with optional file attachments using SMTP and a Gmail App Password.
- Provides a `send_email` function accessible via the OpenClaw function tool.
- Supports specifying recipient, subject, body, and optional file attachment.
元数据
常见问题
Email Sender 是什么？
Send emails with optional file attachments using a Gmail account via SMTP by specifying recipient, subject, body, and an optional attachment path. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1974 次。
如何安装 Email Sender？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install email-sender」即可一键安装，无需额外配置。
Email Sender 是免费的吗？
是的，Email Sender 完全免费（开源免费），可自由下载、安装和使用。
Email Sender 支持哪些平台？
Email Sender 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Email Sender？
由 elodyzen（@elodyzen）开发并维护，当前版本 v1.0.2。
推荐 Skills