Sales Email Automation (IMAP/SMTP)

Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Wor...

This skill appears to implement a full sales-email workflow (IMAP/SMTP, auto-archiving, OKKI matching, Discord review, quotation generation). That is plausible, but you should not install it blindly. Before using: 1) Review the code files (auto-capture.js, discord-review.js, scripts/*.js) yourself or with a dev you trust; pay special attention to any child_process.exec/execSync/execFile usage and the places where .env files are read. 2) Ensure you do NOT keep sensitive global credentials in a workspace-level .env two directories above the skill (discord-review tries to read ../../.env). 3) Remove or sandbox integrations you don't need (Discord bot token, OKKI CLI, vector search) or provide them via isolated, limited accounts. 4) Run the skill in an isolated container or dedicated system account with minimal permissions and with only the exact IMAP/SMTP credentials it needs. 5) If you need to allow automated sending, enforce human review for high-risk intents (complaints/partnership) and audit mail-sending logs. If you cannot review the code, consider not installing or restricting the environment and file access the skill can see.

Type: OpenClaw Skill Name: sales-email-automation Version: 1.0.0 This skill bundle automates B2B sales workflows by integrating email (IMAP/SMTP), CRM (OKKI), and LLMs. It is classified as suspicious due to critical shell injection vulnerabilities in auto-capture.js and kb-retrieval.js, where untrusted data from email subjects or domains is passed directly into execSync calls to execute local Python scripts. While the bundle demonstrates benign intent through extensive documentation and security features like file path whitelisting in scripts/imap.js and scripts/smtp.js, the unsafe handling of external input when constructing shell commands presents a significant security risk that could allow an attacker to execute arbitrary code on the host system.