使用 IMAP IDLE 保持长连接实时监听新邮件，并发送给指定飞书账号。当需要：1）监听新邮件并实时推送通知，2）建立邮件推送服务，3）替代轮询检查新邮件时使用此 skill。

This skill appears to implement IMAP IDLE → Feishu notifications, but it asks you to embed sensitive credentials directly into the Python file and it has undeclared Python dependencies. Before installing or running: 1) do not paste real credentials into a file you didn't audit — instead modify the script to read credentials from a secure place (environment variables or a protected config file) and/or validate that it reads openclaw.json as claimed; 2) review the full script (including the truncated remainder) to confirm no unexpected network endpoints or data exfiltration; 3) install dependencies in a virtualenv or container rather than system-wide; 4) restrict file permissions on the script and notification file; 5) consider running the skill under a dedicated account or container with limited network access if you must provide real credentials. If you want, I can: (a) show a safe patch to make the script read credentials from environment variables, (b) scan the rest of the file (provide the truncated part) for additional issues, or (c) suggest a safer deployment pattern (systemd unit + secrets from a key manager).

Type: OpenClaw Skill Name: imap-idle-sender Version: 1.0.0 The skill is a legitimate IMAP IDLE mail listener designed to provide real-time email notifications via Feishu. The core logic in `scripts/imap_idle.py` uses the `imap-tools` library to monitor an IMAP mailbox for new messages and sends summaries to the official Feishu API (`open.feishu.cn`). The script handles email decoding, HTML parsing, and connection heartbeats appropriately. There is no evidence of credential exfiltration, unauthorized network calls, or malicious instructions in the `SKILL.md` documentation.