Email Manager
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can create and update local files for its email-management data, but the visible instructions do not show network access, inbox access, or email sending.
The skill requests local read/write access, but the artifact scopes that access to its own data directory and explains it is used for templates, follow-ups, settings, and stats.
metadata: {"clawdbot":{"emoji":"📧","requires":{"tools":["read","write"]}}} ... Only reads/writes files under `~/.openclaw/email-manager/`Review the files it creates under ~/.openclaw/email-manager and avoid granting broader file access than the skill describes.
Email drafts and follow-up details may remain on the device and could influence later use of the skill until the files are deleted or edited.
The skill persists email-related content locally, including follow-ups and draft history, which may contain personal, business, or confidential information.
All data stored under `~/.openclaw/email-manager/`: ... `follow_ups.json` — follow-up reminders ... `history.json` — drafted emails log
Do not save highly sensitive email content unless you are comfortable storing it locally, and periodically review or clear the history and follow-up files.