Send transactional email via DmartechX/Iemail OpenAPI. Configure in OpenClaw skills env or use secret.md.

Name: Send transactional email via DmartechX/Iemail OpenAPI. Configure in OpenClaw skills env or use secret.md.
Author: jack-atlas

作者 Jack · GitHub ↗ · v1.0.4 · MIT-0

cross-platform ⚠ suspicious

313

总下载

当前安装

版本数

在 OpenClaw 中安装

/install iemail-send

功能描述

Send transactional email via Iemail OpenAPI. Configure via OpenClaw skill env only.

使用说明 (SKILL.md)

Iemail Send

Send transactional single email via Dmartech/Iemail OpenAPI using Python.

Configuration

Configure in ~/.openclaw/openclaw.json:

"skills": {
  "entries": {
    "iemail-send": {
      "enabled": true,
      "env": {
        "IEMAIL_ACCESS_KEY": "your-access-key",
        "IEMAIL_ACCESS_KEY_SECRET": "your-access-key-secret",
        "IEMAIL_SENDER": "[email protected]"
      }
    }
  }
}

Variable	Description
IEMAIL_ACCESS_KEY	OpenAPI access key
IEMAIL_ACCESS_KEY_SECRET	OpenAPI access key secret
IEMAIL_SENDER	Sender email address (required)
IEMAIL_TO	Default recipient (optional)

Agent instructions

Credentials: Read ~/.openclaw/openclaw.json or workspace config files. OpenClaw injects env at runtime.

Send mail: Run script in workspace:

python3 {baseDir}/send_email.py --to "[email protected]" --subject "Subject" --content "Body"

Usage examples

python3 {baseDir}/send_email.py --to "[email protected]" --subject "Hello" --content "Hello from Iemail"
python3 {baseDir}/send_email.py "[email protected]" "Hello" "Hello from Iemail"

Troubleshooting

401 Unauthorized: Check IP whitelist, key/secret, and system time.
cannot find senderAddressSn: Check IEMAIL_SENDER matches a configured sender address.

安全使用建议

This skill appears to do what it claims: send transactional email through Iemail. Before installing, confirm you trust the Dmartech domain (iemail-api.dmartech.cn) and are comfortable storing the IEMAIL_ACCESS_KEY and IEMAIL_ACCESS_KEY_SECRET in your OpenClaw skill env. Note the Python script will auto-install requests/cryptography via pip at runtime — if you prefer stricter control, preinstall dependencies in a sandboxed environment. Also be aware that SKILL.md suggests reading your OpenClaw config file (~/.openclaw/openclaw.json) for credentials; limit what you store there to avoid exposing unrelated secrets.

功能分析

Type: OpenClaw Skill Name: iemail-send Version: 1.0.4 The skill 'iemail-send' contains security vulnerabilities, specifically the use of `os.system` in `send_email.py` to execute shell commands for runtime dependency installation (pip), which is a high-risk practice. Additionally, the script employs the cryptographically weak `AES.MODE_ECB` mode for generating authentication signatures sent to `https://iemail-api.dmartech.cn`. While the code's logic is consistent with its stated purpose of sending transactional emails, these implementation flaws represent significant security risks.

能力评估

✓ Purpose & Capability

Name/description, required env vars (IEMAIL_ACCESS_KEY, IEMAIL_ACCESS_KEY_SECRET, IEMAIL_SENDER), and the included Python script all match the stated purpose of sending transactional email through Dmartech/Iemail OpenAPI. Requiring python3 is reasonable. The API endpoints used are under the expected dmartech domain.

ℹ Instruction Scope

SKILL.md tells the agent to read ~/.openclaw/openclaw.json or workspace config files for credentials. The included send_email.py itself reads only environment variables (os.getenv). Asking the agent to read OpenClaw config files is expected for this platform, but it could expose other skill configuration values if the agent actually reads the full file — this is a scope note rather than a mismatch with purpose.

ℹ Install Mechanism

The bundle has no declared install spec, but send_email.py will auto-install missing Python packages at runtime using pip (requests and, if needed, cryptography). This is not an external binary download, but runtime pip installs are a moderate operational risk (modifies environment, pulls from PyPI).

✓ Credentials

The skill only requires three environment values specific to the email service (access key, secret, sender) plus an optional IEMAIL_TO. There are no unrelated credentials or broad filesystem/config path access requested.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills, and is user-invocable. It runs only when invoked and doesn't demand persistent system privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install iemail-send
安装完成后，直接呼叫该 Skill 的名称或使用 /iemail-send 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.4

- Changed agent instructions: Now advises agents to read `~/.openclaw/openclaw.json` or workspace config files for credentials. - Previously, agents were instructed not to read config files; now, explicit permission is given.

v1.0.3

- Dropped support for secret.md file; all configuration must now be done via environment variables. - Updated documentation and agent instructions to remove references to secret.md. - Environment variables required for operation are clearly specified and must be provided by OpenClaw at runtime. - Cleaned up usage examples and streamlined troubleshooting guidance for current configuration method.

v1.0.2

- Added secret.md sample file. - Agent configuration instructions updated: now permits reading credentials from ~/.openclaw/openclaw.json or workspace config files (previously only runtime-injected env was allowed).

v1.0.1

- Updated SKILL.md to clarify the configuration example, changing the `IEMAIL_SENDER` value from "[email protected]" to "[email protected]". - No code or functional changes; documentation update only.

v1.0.0

- Initial release of iemail-send skill. - Enables sending transactional single emails via Dmartech/Iemail OpenAPI using Python. - Supports environment variable and secret file configuration for credentials. - Provides command-line examples for sending emails and troubleshooting common issues.

元数据

Slug iemail-send

版本 1.0.4

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 5

常见问题