Sendook

Read and send emails from an existing Sendook inbox. Use when an AI agent needs to check for new emails, read messages, reply to conversations, or send new emails from a pre-configured inbox. Limited to message operations only — no inbox creation, domain management, or webhook configuration.

This skill is coherent with its purpose and requests only the Sendook API key and an inbox ID. Before installing: (1) grant a least-privileged API key scoped to the single inbox you want the agent to use; (2) be aware that an agent with this skill can read and send mail from that inbox — restrict the key and monitor usage; (3) confirm file-attachment behavior: the skill can read local files if asked, so only allow attaching files you approve and avoid giving the agent access to sensitive paths; (4) if you want stricter control, require manual confirmation before sending messages or disable autonomous invocation for agents using this skill.

Type: OpenClaw Skill Name: sendook Version: 1.1.0 The skill is designed for email interaction, which inherently involves sending and receiving data, including attachments. While the capability to read local files for attachments exists (via `readFileSync`), the `SKILL.md` explicitly instructs the AI agent to 'Always confirm with the user before reading any local file to attach' and 'Never read files outside the current working directory or project scope (e.g., no ~/.ssh, ~/.env, /etc, or credential files)'. These instructions actively mitigate prompt injection risks and unauthorized data exfiltration, demonstrating a clear intent to guide the agent securely rather than maliciously. All API calls are to a legitimate-looking domain (`api.sendook.com`) and use standard authentication.