139mail（非官方）

This skill appears to do what it says (manage a 139 mailbox via IMAP/SMTP), but you should consider the following before installing or using it: - It requires your 139 mailbox address and the 16‑character authorization code; the agent may ask you to paste these in chat if you follow the provided prompt. Prefer entering credentials locally (running the provided config_manager.py) instead of typing them into an open chat whenever possible. - Credentials are stored in a plaintext JSON file (config/139mail.conf). The script tries to chmod the file to 600, but that may not be enforced on Windows. If you care about secrecy, store credentials in a secure credential store or limit filesystem access to that file. - The code disables normal certificate verification (ssl._create_unverified_context()) and lowers OpenSSL security level to connect to an old TLS server. This is acknowledged in the docs but reduces transport security and makes man‑in‑the‑middle attacks easier. Only use this on trusted networks, and avoid running it on untrusted/public Wi‑Fi. - If you only need short‑term access, consider creating an authorization code and revoking it after use. Review and run the scripts in an isolated environment (e.g., a VM or dedicated container) if you are unsure. If you want stronger guarantees, ask the author to implement certified TLS verification fallback, encrypt the config on disk or integrate with OS credential stores, and avoid recommending PYTHONHTTPSVERIFY=0.