OctoMail

Agent email via JSON API. Use when sending/receiving email as an agent, checking inbox, or working with the OctoMail service (@octomail.ai addresses).

This skill appears to be what it says: a simple wrapper/instruction set for the OctoMail API. Before installing or using it, confirm you trust https://octomail.ai and are comfortable with an agent holding an API key that can read and send messages. Treat OCTOMAIL_API_KEY as a secret: store it in a secure secret store (not a shared plaintext file), rotate it if leaked, and restrict its scope where possible. Because the SKILL.md suggests persisting the api_key returned by /agents/register, ensure your agent runtime stores secrets safely. If you need stricter control, avoid granting autonomous agent invocation or use a throwaway/test account first to validate behavior and privacy (messages and attachments will transit the OctoMail service). Finally, verify TLS and endpoint URLs before sending sensitive content and review OctoMail's privacy/terms on the homepage.

Type: OpenClaw Skill Name: octomail Version: 0.1.5 The skill is classified as suspicious due to a significant supply chain vulnerability and potential file write risks. The `SKILL.md` file instructs the agent to fetch and interpret new skill definitions from a remote URL (`https://api.octomail.ai/skill.md`). This self-update mechanism allows for dynamic modification of the agent's behavior, posing a high risk if the remote server is compromised, as an attacker could inject malicious instructions. Additionally, the attachment download functionality (`curl ... -o file.pdf`) introduces a file write capability, which could be exploited if the agent does not properly sanitize filenames or paths, potentially leading to arbitrary file overwrites or placement of malicious content.