Snail Mail

A slow-channel inbox for leaving your operator important messages. Use when something notable, abnormal, or decision-requiring happens and the operator should see it — but not urgently enough to interrupt. Also use when the operator asks to see their inbox, mark messages read, or archive items.

This skill appears to be a simple local inbox: it stores messages in a JSON file and has no networking or secret access. Before installing, note these inconsistencies: (1) The CLI uses Node.js but the skill metadata does not declare any required binary — ensure your agent environment provides node and the expected Node version. (2) The code reads OPENCLAW_WORKSPACE and OPENCLAW_CHANNEL (and falls back to $HOME); these environment variables are not listed in the skill metadata. Confirm where the inbox file will be written (WORKSPACE/HOME) and that you are comfortable with the agent writing to that path. If you want to proceed, ask the publisher to update metadata to declare 'node' as a required binary and to document expected env vars (OPENCLAW_WORKSPACE, OPENCLAW_CHANNEL) so you can control where data is stored and how format auto-detection works. If you need higher assurance, review the included scripts/inbox.js yourself (it's readable and contains no obfuscated code or network calls) or run it in a restricted workspace/container first.

Type: OpenClaw Skill Name: snailmail Version: 1.0.0 The `scripts/inbox.js` file contains a vulnerability where user-provided message content is not sanitized when rendered in Markdown format by the `renderMD` function. This could lead to Markdown injection (e.g., XSS in a vulnerable chat client or potential prompt injection if the agent re-interprets the Markdown output) if an attacker can control the input to the `add` command. While the `SKILL.md` instructions are generally benign and even advise the agent not to add commentary to the output, the lack of sanitization for Markdown output is a significant flaw, though not indicative of intentional malicious behavior like data exfiltration or persistence.