osascript-email

Send automated plain-text emails on macOS via Mail.app using AppleScript without SMTP credentials, suitable for alerts and reports, not bulk or HTML emails.

This skill appears to do what it says (send Mail.app messages via AppleScript) but take precautions before installing: (1) Review and test the included scripts locally — the Python helper constructs AppleScript by interpolating user strings; avoid passing untrusted input as subject/body/to/attachment_path. (2) Be careful with attachments: supplying absolute paths lets the skill send arbitrary local files — do not give the agent broad file-system read access or allow autonomous runs that could pick sensitive files. (3) Limit Automation permissions and prefer user-invocable use (do not enable broad autonomous invocation) unless you trust the agent and inputs. (4) If you plan to use this from an automated agent, add input sanitization or stronger quoting to prevent AppleScript injection and carefully audit any cron/agent workflows that call send_email. Additional information that would raise confidence: a hardened escaping routine for AppleScript used in the helper, tests demonstrating safe handling of special characters, or an explicit note limiting agent file-access when used autonomously.

Type: OpenClaw Skill Name: osascript-email Version: 1.0.0 The skill provides functionality to send emails and attachments via macOS Mail.app using `osascript`. It is classified as suspicious due to weak input sanitization in `scripts/send_email.py` and `references/attachments.md`, which only perform basic escaping of double quotes and backslashes. This creates a vulnerability to AppleScript injection if the agent processes untrusted content for the email subject or body, potentially allowing unauthorized local automation commands beyond the stated purpose.