Skill Mail Sender

邮件发送工具，支持 HTML 和 Markdown 格式。当用户需要发送邮件、通知、报告、提醒或任何邮件相关任务时使用此技能。触发场景包括：(1) 发送 HTML 格式邮件，(2) 发送 Markdown 格式邮件（自动转换为 HTML），(3) 批量发送邮件给多个收件人，(4) 发送系统通知或报告，(5) 发送...

This skill appears to be a standard SMTP mail sender, but before installing you should: (1) Recognize it requires email credentials (authorization codes) — do not provide login passwords; use app-specific passwords and environment variables with tight permissions. (2) Note the registry metadata does NOT declare those env vars; that mismatch reduces transparency — be cautious. (3) Inspect the included scripts/mail_sender.py yourself (or run in an isolated environment) to confirm it only uses SMTP and does not send credentials to other endpoints. (4) Be aware the docs disagree on recommended config paths — decide and secure where you store config (set file permissions to 600 and add to .gitignore). (5) Consider removing or auditing unused dependencies (requests) in requirements.txt to reduce supply-chain risk. If you need higher assurance, ask the publisher for corrected metadata that lists required env vars and for clarification about the recommended config path, or run the code in a sandboxed environment.

Type: OpenClaw Skill Name: skill-mail-sender Version: 1.0.0 The mail-sender skill is a legitimate utility for sending HTML and Markdown emails via SMTP. The core logic in scripts/mail_sender.py uses standard Python libraries (smtplib, email) and implements secure configuration practices by prioritizing environment variables and local configuration files over hardcoded values. No evidence of data exfiltration, unauthorized network calls, or malicious prompt injection was found; the code's behavior is entirely consistent with its stated purpose.