Outlook Email

ReviewAudited by ClawScan on May 13, 2026.

Overview

This is a coherent Outlook integration that uses ClawLink/OAuth to access email and requires confirmation before sending, deleting, or other mailbox changes.

Before installing, make sure you trust ClawLink with Outlook access, review the OAuth permissions Microsoft asks you to approve, and only confirm actions after checking previews for sends, deletes, moves, forwards, or bulk mailbox changes.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Connecting Outlook can allow the integration to read mailbox content and perform mail actions within the permissions the user grants.

Why it was flagged

The skill requires delegated Microsoft/Outlook account access through OAuth, which is expected for reading and managing email but gives access to a sensitive account.

Skill content
ClawLink's hosted page runs whichever provider flow is needed (hosted OAuth with Microsoft)
Recommendation

Review the Microsoft consent screen and granted scopes, connect only if you trust ClawLink, and revoke access when no longer needed.

What this means

A mistaken or misunderstood request could send or alter email if the user approves the action.

Why it was flagged

The skill can trigger high-impact Outlook operations, but it explicitly requires confirmation before these mailbox-changing actions.

Skill content
Send, reply, forward, move, or delete messages only after confirmation
Recommendation

Carefully review previews and confirmations, especially for sends, deletes, moves, forwards, and bulk actions.

What this means

The real behavior depends on the installed ClawLink plugin and live ClawLink tool catalog.

Why it was flagged

The instruction-only skill depends on an external plugin and hosted service not included in this artifact set; this is purpose-aligned but introduces a dependency users should verify.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the plugin only from the expected ClawHub source and verify ClawLink’s documentation, source, and permissions before connecting email.

What this means

Email queries, results, and actions may pass through or be mediated by ClawLink rather than staying entirely local.

Why it was flagged

Outlook actions are routed through the ClawLink integration gateway; the boundary is disclosed, but mailbox data and operations depend on that third-party service.

Skill content
Always use ClawLink tools for Outlook.
Recommendation

Use this skill only if you are comfortable with ClawLink mediating Outlook access, and avoid approving access for mailboxes containing data you do not want processed through that service.