Mail Sender (Jaskies)
v1.0.0Gửi email qua giao thức SMTP. Hỗ trợ tùy chỉnh tiêu đề, nội dung và người nhận. Yêu cầu cấu hình tài khoản email (như Gmail App Password) để hoạt động.
⭐ 0· 187·0 current·0 all-time
byTrần Anh Vũ@jaskies
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, SKILL.md and scripts/send.py are consistent: this skill sends mail via SMTP and supports configuring SMTP_SERVER, SMTP_PORT, SMTP_USER, SMTP_PASS and FROM_EMAIL. Minor inconsistency: the registry metadata lists no required environment variables or primary credential, but the skill requires SMTP credentials at runtime (either via args or env).
Instruction Scope
Runtime instructions only describe sending email and how to create a Gmail App Password for SMTP. The script only reads environment variables/arguments for SMTP configuration and does not reference unrelated files, secrets, or external endpoints other than the user-specified SMTP server.
Install Mechanism
No install spec is provided (instruction-only + a small Python script). The script uses Python standard libraries (smtplib, email), so there is no download or execution of third-party code at install time.
Credentials
The skill legitimately needs SMTP credentials (SMTP_USER and SMTP_PASS / App Password) and optional FROM_EMAIL; requesting those is proportionate. However, the package metadata did not declare these required env vars or a primary credential, which is an omission the user should be aware of. Treat SMTP_PASS as a secret (do not share) and prefer app-specific passwords or throwaway accounts for testing.
Persistence & Privilege
always is false and the skill does not request any persistent system privileges or modify other skill/system configurations.
Assessment
This skill appears to do what it says: send email via SMTP using credentials you provide. Before installing or running it: (1) verify you supply an App Password or SMTP credentials (SMTP_USER, SMTP_PASS) — the registry metadata omits this requirement; (2) avoid using your primary account password, follow the SKILL.md advice to use Gmail App Passwords or a dedicated mailbox; (3) prefer setting credentials in a secure environment (not in shared logs or public files); (4) test first with a disposable account to confirm behavior; and (5) if you need the registry/skill metadata to reflect required secrets, ask the publisher to declare SMTP_* env vars and mark SMTP_PASS as the primary credential.Like a lobster shell, security has layers — review code before you run it.
latestvk97f3xeqmw9xpkzmw8z4c7m1q982se4v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.