Qq Mail Monitor

QQ 邮箱自动监控技能，支持定时检查新邮件、TTS 语音播报提醒、邮件收发功能。适用于邮件通知、验证码提取、自动回复等场景。

This skill largely does what it says (checks QQ IMAP, sends via SMTP), but take these precautions before installing or running it: 1) Do NOT hard-code your QQ auth code into the scripts. Replace the EMAIL/AUTH_CODE variables with secure environment variables (os.getenv) or a protected secrets store. 2) Change the STATE_FILE path to a location inside the skill's data directory (or configurable via env var) so it won't write to someone else's absolute path (/Users/qin/...). 3) Remember outputs (stdout/cron logs) include email subject/from — treat logs as sensitive and avoid exposing them to untrusted services. 4) Verify cron/task integration and that the runtime environment can reach imap.qq.com/smtp.qq.com. 5) If you need assistant-level pause/resume functionality, inspect or implement the control hooks — they are not present by default. If these inconsistencies worry you or you cannot modify the code, prefer a skill that declares required credentials and reads them from env vars rather than editing files.

Type: OpenClaw Skill Name: qq-mail-monitor Version: 1.0.0 The skill is classified as suspicious due to a hardcoded file path for state management (`/Users/qin/.openclaw/workspace/.mail_state.json` in `scripts/qq_mail_auto_check.py` and `scripts/qq_mail_monitor.py`), which is a minor vulnerability that could lead to errors or unintended file access in different environments. Additionally, while the skill's core functionality (email monitoring and sending) is legitimate, it requires sensitive email authorization codes, and the `README.md` instructs users to directly edit the script for configuration, which is a less secure practice than using environment variables (though `PUBLISH.md` advises the latter). The `SKILL.md` and `README.md` also contain instructions for the AI agent to manage cron jobs and interact with email content, representing an inherent prompt injection surface, though the provided instructions themselves are benign and functional.