Send Email Tool

邮件发送工具。配置 SMTP 发件人后，通过脚本发送纯文本或 HTML 邮件，支持附件、抄送、密送。在需要发送邮件通知、报告、自动化邮件时触发。

This skill appears to do what it says (send SMTP email with templates, attachments, inline images). Before installing/using it, consider the following: 1) Prefer installing and using a real system keyring (pip install keyring) so credentials are not stored in the fallback base64 files; if keyring fallback files (~/.send_email_password, ~/.send_email_username) appear delete them and re-save credentials to keyring. 2) Treat the config file (~/.send_email_config.json) and any backup credential files as sensitive — ensure file permissions (0o600) and avoid using on multi-user/shared machines. 3) Test with a non-critical email account and use app-specific passwords (e.g., Gmail App Password) rather than your main account password. 4) Be aware the script will read any local paths you provide (attachments, inline images, template files); do not pass sensitive system files as attachments. 5) If you allow the agent to invoke the skill autonomously, remember that an attacker or misconfigured agent could craft messages that exfiltrate local files — restrict autonomous use or review invocation policies if necessary. 6) If you want stronger protection, review the send_email.py source before use and consider replacing the base64 fallback with proper encryption or forcing keyring-only storage.

Type: OpenClaw Skill Name: send-email-tool Version: 2.5.0 The skill's core functionality of sending emails is benign. However, it is classified as suspicious due to a critical vulnerability in its credential management fallback. If the `keyring` library is not available, the skill stores the sender's email and password in local files (`~/.send_email_username`, `~/.send_email_password`) using base64 encoding. Base64 is an encoding, not encryption, making these credentials easily reversible and recoverable by anyone with local file access, despite the files being set to 0o600 permissions. This insecure storage mechanism, explicitly noted in `SKILL.md` and implemented in `scripts/send_email.py`, presents a significant security flaw that could be exploited if the system is compromised, even though there is no evidence of intentional malicious exfiltration by the skill itself.