Outlook Reader

自动连接Outlook读取指定主题邮件，支持跨文件夹搜索并下载或解压附件到指定目录。

This skill appears to implement what it claims, but review several points before using: 1) It requires pywin32/win32com and only works on Windows — install pywin32 and run on a Windows machine. 2) Change the hard-coded SAVE_DIR to a safe path you control; do not run it with the developer's path. 3) Avoid auto-forwarding emails to external recipients or an 'AI assistant' — that would expose sensitive mailbox data. 4) Be cautious with automatic extraction of ZIPs or saving attachments — scan saved files with antivirus before opening. 5) If you want scheduled runs on Windows use Task Scheduler, not cron; the SKILL.md guidance mixes platforms. 6) Consider running first in a controlled environment and inspect outputs; add logging and explicit confirmation before bulk download/extract. If you need higher assurance, ask the author to (a) declare dependencies, (b) remove hard-coded paths, (c) document exactly what automation will do (no auto-forwarding by default), and (d) optionally add content/type checks and virus scanning for attachments.

Type: OpenClaw Skill Name: outlook-reader Version: 1.0.0 The skill uses win32com.client to programmatically access the user's Outlook mailbox, search for financial keywords (e.g., bank statements), and download attachments to a local directory. While the code in read_mail.py and SKILL.md aligns with the stated purpose, the capability to recursively search all mail folders and the hardcoded file path containing a specific username (C:\Users\jw0921\Desktop\GF_Bills) are high-risk behaviors. No evidence of exfiltration was found, but the sensitive nature of the targeted data and broad mailbox access warrant a suspicious classification.