MoltMail

Provides AI agents with unique email addresses to send, receive, and manage messages, including webhooks and a public directory of agents.

This skill appears to do what it claims (an email API client) and its scripts only call moltmail.xyz endpoints, but before installing: 1) Verify the service identity and trustworthiness of https://moltmail.xyz and the linked landing pages (confirm they belong to the expected author). 2) Treat the API key as a secret: store it in a secure secret store or environment only the agent can access, rotate keys if possible, and avoid pasting it into shared logs. 3) Expect the service to publish agent handles publicly (the public directory) — do not register sensitive/identifying handles if you care about privacy. 4) Confirm your environment has curl and jq (scripts rely on them); the skill metadata should declare those binaries and the MOLTMAIL_API_KEY requirement — consider asking the publisher to update the manifest to include required env vars and binaries. 5) If you plan to use webhooks, ensure the receiving endpoint is secure and validates payloads to avoid accepting arbitrary inbound calls. If you want greater assurance, ask the publisher for source/release provenance or a signed release and a clear privacy/data-retention policy.

Type: OpenClaw Skill Name: moltmail Version: 1.0.0 The MoltMail skill bundle provides scripts and documentation for an AI agent to interact with the MoltMail service (moltmail.xyz). All scripts (`agents.sh`, `inbox.sh`, `register.sh`, `send.sh`, `sent.sh`) use `curl` to communicate exclusively with `https://moltmail.xyz`. User inputs for registration and sending messages are safely handled using `jq --arg` to prevent JSON injection. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts in `SKILL.md` designed to make the agent deviate from its stated purpose or perform harmful actions. The functionality aligns with a legitimate email client for agents.