← Back to Skills Marketplace
2176
Downloads
0
Stars
57
Active Installs
1
Versions
Install in OpenClaw
/install email-skill
Description
Email management and automation. Send, read, search, and organize emails across multiple providers.
Usage Guidance
Install only if you want the agent to send real emails through an account you configure. Prefer a dedicated sending account or app password, keep email_config.json out of version control, and require a final review that names the recipients, subject, body summary, and every attachment path before sending.
Capability Analysis
Type: OpenClaw Skill
Name: email-skill
Version: 0.1.0
The `email_sender.py` script allows attaching arbitrary files from the local filesystem, which, while necessary for an email attachment skill, creates a significant data exfiltration vulnerability. If a malicious prompt or user input controls the `attachments` list, the OpenClaw agent could be instructed to attach sensitive system files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`) and email them to an external, attacker-controlled address. This is a powerful capability that can be abused, classifying it as suspicious due to the potential for exploitation, rather than outright malicious intent within the skill's code itself.
Capability Assessment
Purpose & Capability
The artifacts coherently implement SMTP email sending with attachments, CC/BCC, TLS/SSL, test emails, CLI usage, and a Python API; the registry description also mentions read/search/organize, but the code does not implement hidden mailbox-reading behavior.
Instruction Scope
The examples are user-directed but broad, and the skill is marked always active, so outbound sends should be treated as side-effecting actions requiring explicit user review.
Install Mechanism
No install script, dependency installer, obfuscation, or package execution was found; requirements.txt lists only comments and standard-library functionality.
Credentials
SMTP credentials via config file or environment variables and attachment file reads are proportionate for an email sender, but they are sensitive because email transmits data off-system.
Persistence & Privilege
The only persistence described is a user-created email_config.json that may store an app password; there is no background service, autostart behavior, privilege escalation, or hidden persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install email-skill - After installation, invoke the skill by name or use
/email-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of the email skill for management and automation.
- Send emails with attachments across multiple providers (Gmail, Outlook, Yahoo, QQ Mail, and custom SMTP)
- Supports HTML/Plain text, CC, BCC, and secure TLS/SSL connections
- Configurable via JSON file or environment variables
- Python API and command-line usage included
- Troubleshooting and security best practices documented
Metadata
Frequently Asked Questions
What is Email?
Email management and automation. Send, read, search, and organize emails across multiple providers. It is an AI Agent Skill for Claude Code / OpenClaw, with 2176 downloads so far.
How do I install Email?
Run "/install email-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Email free?
Yes, Email is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Email support?
Email is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Email?
It is built and maintained by awspace (@awspace); the current version is v0.1.0.
More Skills