ProtonMail via Proton Mail Bridge

ProtonMail integration via Proton Mail Bridge for reading and sending encrypted emails.

This skill appears to do what it says: it connects to a local Proton Mail Bridge using the Bridge-generated credentials. Before installing, consider the following: 1) Avoid storing the Bridge password in plain text if possible — prefer OS keychain/password manager or ensure ~/.openclaw/openclaw.json is strictly permissioned (chmod 600). 2) Be aware OpenClaw session logs/tool calls can contain email text; protect your workspace and access to your machine. 3) Verify you install Proton Mail Bridge from the official source (Homebrew cask or Proton's site). 4) Review the skill source if you want extra assurance (it uses local IMAP/SMTP only; no external endpoints). 5) Keep the skill and dependencies updated and audit npm dependencies periodically. Note: some documentation files mention TLS validation behavior; the code constrains Bridge hosts to localhost and uses plain localhost connections — this is expected for Bridge but is a local-only trust decision you should accept consciously.

Type: OpenClaw Skill Name: openclaw-protonmail Version: 1.0.1 The ProtonMail skill is a legitimate integration for managing encrypted emails via the local Proton Mail Bridge. The codebase demonstrates strong security practices, including enforcing localhost-only connections in src/index.ts and implementing robust input sanitization and length limits for IMAP search queries in src/imap.ts to prevent injection. Furthermore, the project includes a transparent security policy (SECURITY.md) and documentation of past security hardening (README.md and CHANGELOG.md), indicating a proactive and responsible development approach without any evidence of malicious intent or data exfiltration.