UpKuaJing email marketing tool, send personalized emails and track campaign performance with real-time delivery status. UpKuaJing helps exporters, marketers, and sales teams reach decision-makers, manage email tasks, and analyze open/click rates — powerful for cold outreach, product promotion, and customer engagement.

Official skill for upkuajing (跨境魔方). Email tool API for sending emails and tracking email task status. Includes email sending, task list, and task record lis...

This skill appears to do what it says: a Python client for UpKuaJing's email APIs that needs a single API key. Before installing, consider: 1) Protect the UPKUAJING_API_KEY (don't share it); the scripts can read it from an env var or ~/.upkuajing/.env and will write that file when creating a new key. 2) Email sends are billable—the tool will prompt for explicit confirmation before actions that incur fees; follow those prompts. 3) The code includes an optional logging switch (disabled by default); if you enable logging it may store request/response bodies (including email content and recipient addresses) in ~/.upkuajing/logs—enable only if you accept that storage. 4) The version check contacts the vendor's server once per day/process to detect updates; if you prefer no network telemetry, inspect/modify version_check.py. If you have high security requirements, run the scripts in an isolated environment, review the code yourself, and supply the API key via environment variable rather than leaving it in a file.

Type: OpenClaw Skill Name: upkuajing-email-tool Version: 1.0.0 The skill bundle is a legitimate integration for the UpKuaJing email platform. The code is well-structured and includes security best practices, such as path traversal protection in `common.py` (using UUID validation and directory prefix checks). It manages API keys locally in `~/.upkuajing/.env` and includes a non-intrusive version check mechanism in `version_check.py` that merely notifies the user of updates via stderr. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.