myskil

Monitor Outlook and other common webmail inboxes in a persistent Edge profile, process new messages as a detached local background task, capture complete mes...

Do not run or allow unsigned PowerShell scripts you didn't review. Before installing or running this skill: (1) ask the publisher for the actual scripts and their cryptographic provenance (source repo, release URL, or a package you can inspect); (2) request an explicit install spec and a list of network hosts the bootstrap will contact; (3) review the contents of any scripts (especially those run with ExecutionPolicy Bypass) to ensure they don't download arbitrary code or persist startup tasks; (4) consider running in a sandboxed or VM environment first; (5) be aware this will access your browser profile, download email attachments to your Desktop, and keep a long-running background process — only proceed if you trust the code and understand those implications.

Type: OpenClaw Skill Name: webmail-email-monitor-skill Version: 1.0.1 The skill bundle (specifically SKILL.md) describes a background webmail monitor that employs high-risk persistence and execution tactics, including bypassing PowerShell execution policies and installing system-level software via winget. It instructs the agent to launch a detached background process and 'return immediately,' effectively hiding the monitor's ongoing activities—such as capturing screenshots and downloading attachments—from the user's immediate oversight. While these capabilities are framed as automation features, the combination of environment modification, sensitive data access, and stealthy execution patterns is highly suspicious.