Apple Mail Search Safe (fruitmail)
v5.0.4Apple Mail search on macOS with fast metadata and full body lookup. Use for finding messages in Mail.app by subject/sender/recipient/date, opening messages,...
⭐ 4· 3.9k·8 current·8 all-time
byGustavo Madeira Santana@gumadeiras
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as an Apple Mail search tool and indeed requires a fruitmail CLI that reads Mail.app's local SQLite index and uses AppleScript for bodies. The declared binary, npm package, and referenced Mail paths match the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run fruitmail commands (search, body, open, stats). It references only Mail-related paths (~/Library/Mail/.../Envelope Index) and AppleScript for body access. There are no instructions to read unrelated system files or exfiltrate data to third-party endpoints.
Install Mechanism
Install uses the npm package apple-mail-search-cli to create the fruitmail binary (global npm install -g). This is a common mechanism for CLI tools but does execute third-party code on install; verify the npm package and its GitHub repository before installing.
Credentials
No environment variables, credentials, or unrelated config paths are requested. The access requested (local Mail DB and AppleScript) is proportional to the skill's function.
Persistence & Privilege
The skill is not marked always:true and does not request persistent privileges beyond installing a CLI. It does not attempt to modify other skills or system-wide settings in the instructions.
Assessment
This skill appears coherent, but note: installing the npm package runs third-party code—inspect the package and its GitHub repo before installing. The tool reads your local Mail database and uses AppleScript to access message bodies, which may trigger macOS permission prompts (Full Disk Access / Mail scripting permissions). If you are concerned about privacy, review the CLI source, run the tool in a controlled environment, and avoid installing if you don't trust the package's publisher.Like a lobster shell, security has layers — review code before you run it.
latestvk97aq9w903p3j9bbjy8k41cbdh81cd6b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📧 Clawdis
Binsfruitmail
Install
Install fruitmail CLI (npm)
Bins: fruitmail
npm i -g apple-mail-search-cli