← 返回 Skills 市场
2176
总下载
0
收藏
57
当前安装
1
版本数
在 OpenClaw 中安装
/install email-skill
功能描述
Email management and automation. Send, read, search, and organize emails across multiple providers.
安全使用建议
Install only if you want the agent to send real emails through an account you configure. Prefer a dedicated sending account or app password, keep email_config.json out of version control, and require a final review that names the recipients, subject, body summary, and every attachment path before sending.
功能分析
Type: OpenClaw Skill
Name: email-skill
Version: 0.1.0
The `email_sender.py` script allows attaching arbitrary files from the local filesystem, which, while necessary for an email attachment skill, creates a significant data exfiltration vulnerability. If a malicious prompt or user input controls the `attachments` list, the OpenClaw agent could be instructed to attach sensitive system files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`) and email them to an external, attacker-controlled address. This is a powerful capability that can be abused, classifying it as suspicious due to the potential for exploitation, rather than outright malicious intent within the skill's code itself.
能力评估
Purpose & Capability
The artifacts coherently implement SMTP email sending with attachments, CC/BCC, TLS/SSL, test emails, CLI usage, and a Python API; the registry description also mentions read/search/organize, but the code does not implement hidden mailbox-reading behavior.
Instruction Scope
The examples are user-directed but broad, and the skill is marked always active, so outbound sends should be treated as side-effecting actions requiring explicit user review.
Install Mechanism
No install script, dependency installer, obfuscation, or package execution was found; requirements.txt lists only comments and standard-library functionality.
Credentials
SMTP credentials via config file or environment variables and attachment file reads are proportionate for an email sender, but they are sensitive because email transmits data off-system.
Persistence & Privilege
The only persistence described is a user-created email_config.json that may store an app password; there is no background service, autostart behavior, privilege escalation, or hidden persistence.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install email-skill - 安装完成后,直接呼叫该 Skill 的名称或使用
/email-skill触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of the email skill for management and automation.
- Send emails with attachments across multiple providers (Gmail, Outlook, Yahoo, QQ Mail, and custom SMTP)
- Supports HTML/Plain text, CC, BCC, and secure TLS/SSL connections
- Configurable via JSON file or environment variables
- Python API and command-line usage included
- Troubleshooting and security best practices documented
元数据
常见问题
Email 是什么?
Email management and automation. Send, read, search, and organize emails across multiple providers. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2176 次。
如何安装 Email?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install email-skill」即可一键安装,无需额外配置。
Email 是免费的吗?
是的,Email 完全免费(开源免费),可自由下载、安装和使用。
Email 支持哪些平台?
Email 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Email?
由 awspace(@awspace)开发并维护,当前版本 v0.1.0。
推荐 Skills