← 返回 Skills 市场

Inbox Zero API CLI

Name: Inbox Zero API CLI
Author: elie222

作者 Elie Steinbock · GitHub ↗ · v2.29.2 · MIT-0

cross-platform ✓ 安全检测通过

200

总下载

当前安装

版本数

在 OpenClaw 中安装

/install inbox-zero-api

功能描述

Use the Inbox Zero API CLI to inspect the live API schema, list and manage automation rules, and read inbox analytics through the public API. Use this when a...

使用说明 (SKILL.md)

Inbox Zero API CLI

Use this skill when the task is to inspect or change Inbox Zero state through the public API.

Workflow

Prefer --json so the output is stable and machine-readable.
Keep credentials in INBOX_ZERO_API_KEY or OpenClaw skill config. Avoid passing API keys as CLI flags unless there is no alternative.
Before creating or replacing a rule body, fetch the live schema with inbox-zero-api openapi --json.
For create and update flows, write JSON into a workspace file or pipe it on stdin.
Treat rules update as a full replacement. Read the current rule first if you only intend to change part of it.

Quick Start

inbox-zero-api rules list --json
inbox-zero-api stats by-period --period week --json
inbox-zero-api openapi --json

If the CLI is not installed yet, install it with the OpenClaw installer or run npm install -g @inbox-zero/api.

OpenClaw Config

Set the API key in ~/.openclaw/openclaw.json under skills.entries.inboxZeroApi.apiKey, or export INBOX_ZERO_API_KEY in the host environment.

Use INBOX_ZERO_BASE_URL or inbox-zero-api config set base-url \x3Curl> only for self-hosted or nonstandard deployments.

Reference

For exact command patterns and a safe mutation flow, read references/cli-reference.md.

安全使用建议

This skill appears to do what it says: a CLI front-end for the Inbox Zero API that needs a single API key. Before installing, confirm the npm package @inbox-zero/api and the homepage (https://www.getinboxzero.com) are the official sources. Installing from npm requires trust because install scripts can run arbitrary code; prefer installing in a controlled environment. Prefer providing the API key via a short-lived environment variable rather than persisting it in ~/.openclaw/openclaw.json or ~/.inbox-zero-api/config.json unless you trust the host. If you have concerns about autonomous invocation, restrict the skill's usage or avoid granting it broad implicit invocation. Rotate the API key if you later suspect it was stored or exposed improperly.

功能分析

Type: OpenClaw Skill Name: inbox-zero-api Version: 2.29.2 The skill bundle provides a legitimate interface for the Inbox Zero API CLI tool (@inbox-zero/api). It facilitates managing automation rules and viewing inbox analytics through standard CLI commands as documented in SKILL.md and references/cli-reference.md. The implementation follows standard OpenClaw patterns for authentication via environment variables (INBOX_ZERO_API_KEY) and contains no evidence of data exfiltration, malicious execution, or prompt injection.

能力评估

✓ Purpose & Capability

Name/description, required binary (inbox-zero-api), primary env var (INBOX_ZERO_API_KEY), and the npm install spec (@inbox-zero/api) all align with a CLI for the Inbox Zero API. No unrelated credentials or binaries are requested.

ℹ Instruction Scope

The SKILL.md stays within the CLI's scope: it instructs reading the OpenAPI schema, listing/managing rules, and using local workspace files or stdin for rule JSON. It references writing/reading configs under ~/.openclaw/openclaw.json and ~/.inbox-zero-api/config.json — expected for config storage but worth noting because those are places secrets may be persisted.

ℹ Install Mechanism

Install is via npm (@inbox-zero/api) which is an expected mechanism for a CLI provided as an npm package. This carries the usual npm risks (install scripts, supply-chain exposure). No arbitrary download URLs or archive extraction is used.

✓ Credentials

Only INBOX_ZERO_API_KEY is required (primaryEnv). An optional INBOX_ZERO_BASE_URL is documented for self-hosting. The number and nature of env vars are proportional to the stated functionality. Be aware the SKILL.md recommends storing the key in OpenClaw config or local config files, which persists the secret to disk.

✓ Persistence & Privilege

always:false and user-invocable:true are appropriate. The skill's agent policy allows implicit invocation (policy.allow_implicit_invocation: true) which is a standard setting for skills; it increases autonomy but is not unusual. The skill does not request elevated or cross-skill config changes.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install inbox-zero-api
安装完成后，直接呼叫该 Skill 的名称或使用 /inbox-zero-api 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v2.29.2

Initial release — manage Inbox Zero rules and stats via the public API CLI

元数据

Slug inbox-zero-api

版本 2.29.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题