{"skill":{"slug":"imap-smtp-mail","displayName":"IMAP SMTP Email","summary":"Read and send email via IMAP/SMTP using local Node scripts. Use when the agent needs to check inboxes, fetch email content, search messages, download attachm...","tags":{"latest":"1.0.4"},"stats":{"comments":0,"downloads":153,"installsAllTime":0,"installsCurrent":0,"stars":0,"versions":5},"createdAt":1774256320574,"updatedAt":1775327929982},"latestVersion":{"version":"1.0.4","createdAt":1775327909106,"changelog":"v1.0.4 — Security hardening + metadata fixes\n\n- Fixed symlink bypass in attachment download path validation (now resolves symlinks before checking ALLOWED_WRITE_DIRS)\n- Fixed ~ expansion in read path validation for attachment sends\n- Workspace root detection is now resilient (OPENCLAW_WORKSPACE env var > marker file walk > fallback) in smtp.js and email-watch-lite.js\n- Constrained --state path to workspace in email-watch-lite.js\n- Removed openclaw from requires.bins (only needed for optional watcher, not core IMAP/SMTP)\n- Added requires.env for IMAP/SMTP credential vars\n- Documented that smtp.js test sends a real email\n- Removed imap-simple dead dependency\n- Fixed package.json: version, author, description","license":"MIT-0"},"metadata":{"os":null,"systems":null},"owner":{"handle":"mohamed-hammane","userId":"s1741t73nrt7q2vnxcrxcxxtjh83hfew","displayName":"Umbra","image":"https://avatars.githubusercontent.com/u/35642940?v=4"},"moderation":{"isSuspicious":true,"isMalwareBlocked":false,"verdict":"suspicious","reasonCodes":["suspicious.dangerous_exec","suspicious.env_credential_access","suspicious.potential_exfiltration"],"summary":"Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.potential_exfiltration","engineVersion":"v2.2.0","updatedAt":1775327929982}}