Outlook

Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar events, or scheduling.

Install only if you are comfortable granting this skill read/write/send access to your Outlook mail and read/write access to your calendar with refresh-token persistence. Avoid running the displayed curl-to-sudo-bash Azure CLI installer, do not use the token-printing command in logged agent sessions, confirm any send/delete/bulk/folder/calendar action yourself, and treat downloaded attachments as able to overwrite local files unless you choose a safe empty directory.

Type: OpenClaw Skill Name: outlook Version: 1.3.0 The skill is classified as suspicious due to a path traversal vulnerability in the `scripts/outlook-mail.sh` file, specifically within the `download` command. This vulnerability allows an attacker to write email attachment content to arbitrary file paths on the agent's filesystem by crafting a malicious attachment name (e.g., `../../.bashrc`). While not clear evidence of intentional malicious behavior by the skill developer, this flaw provides a powerful primitive for a malicious prompt to exploit, potentially leading to persistence or arbitrary code execution. Additionally, the skill requests broad permissions (Mail.ReadWrite, Mail.Send, Calendars.ReadWrite) which, while aligned with its stated purpose, represent high-risk capabilities.