Mail Sender SMTP
v1.0.0Send emails via SMTP. Use when the user needs to send an email with a custom subject and body. This skill requires SMTP configuration (server, port, user, pa...
⭐ 0· 250·0 current·0 all-time
byTrần Anh Vũ@jaskies
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description, SKILL.md, and the included Python script all align: the skill sends email via SMTP and requires SMTP server, port, user, and password. However, the registry metadata lists no required environment variables even though the SKILL.md and script clearly rely on SMTP-related env vars — a transparency mismatch.
Instruction Scope
SKILL.md instructs only how to configure SMTP creds and run the bundled script. The script only reads SMTP-related environment variables/arguments and connects to the specified SMTP server; it does not access other files, system config, or external endpoints beyond the provided SMTP host.
Install Mechanism
There is no install spec (instruction-only with a bundled script). No third-party downloads or package installs are requested, which keeps installation risk low.
Credentials
The skill legitimately requires sensitive credentials (SMTP_USER and SMTP_PASS). That is proportionate for sending email, but the registry metadata failing to declare these required env vars is concerning for transparency. Users should provide these secrets securely (env vars or runtime args) and avoid embedding them in chat history.
Persistence & Privilege
The skill is not marked 'always', does not modify other skills or system configuration, and does not request persistent/system-wide privileges. It behaves as an on-demand tool.
Assessment
This skill appears to do exactly what it says: run the included Python script to send SMTP email. Before installing, verify the source/publisher (no homepage provided), and provide credentials securely (use env vars or CLI args, not chat). Use an app-specific password or a dedicated sending account rather than your primary mailbox. Ask the publisher to update the registry metadata to declare the required env vars (SMTP_SERVER, SMTP_PORT, SMTP_USER, SMTP_PASS, FROM_EMAIL) for transparency. If you need stronger isolation, run the script in a sandboxed environment or dedicated sending account to limit exposure if credentials are leaked.Like a lobster shell, security has layers — review code before you run it.
latestvk9729qwsjb7j6q8mmtjn8jd1cx82ssa3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.