my_send_email

Send an email by specifying the receiver's address, subject, and content.

This skill will send emails using a hardcoded corporate SMTP account embedded in the script. That means the skill can send messages as [email protected] and the password is stored in plaintext inside the skill. Before installing: do not use production credentials in skills; ask the author to remove the hardcoded password and accept SMTP credentials via secure environment variables or a credentials store; ensure the SMTP account is a dedicated, limited-power account and rotate the password immediately if this code has been exposed; prefer a version that does not include organization credentials in-source. If you must use it, run it in a controlled environment and audit/monitor outgoing emails.

Type: OpenClaw Skill Name: mysendemail Version: 1.0.1 The skill bundle contains hardcoded plaintext credentials (password: 'A5b3C3D6!') for a corporate SMTP account ([email protected]) in the send_mail.py script. While the script's logic aligns with its stated purpose of sending emails, the inclusion of sensitive credentials in the source code is a significant security risk that could lead to unauthorized use of the email account.