Apple Mail Search
v1.0.0Fast Apple Mail search via SQLite on macOS. Search emails by subject, sender, date, attachments - results in ~50ms vs 8+ minutes with AppleScript. Use when asked to find, search, or list emails.
⭐ 2· 3.1k·12 current·12 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description, technical details, and example commands all align with a tool that queries Mail's Envelope Index via sqlite. However the SKILL.md metadata declares sqlite3 as a required binary while the registry metadata showed no required binaries—an inconsistency. Also the instructions assume a 'mail-search' executable is available to copy to /usr/local/bin, but this skill bundle contains no code files or binary.
Instruction Scope
Instructions are narrowly scoped to reading Mail.app's Envelope Index (~/Library/Mail/.../MailData/Envelope Index) and using sqlite3; that is coherent with the purpose. The concerning part is explicit install guidance to copy an external 'mail-search' binary into /usr/local/bin despite no binary being packaged. The doc does not instruct any unrelated data collection or external network exfiltration, but the install step gives an agent the ability to place a binary on the system if the agent follows it.
Install Mechanism
There is no formal install spec in the registry (instruction-only), which is low-risk. But SKILL.md requires an external binary to be copied into /usr/local/bin — since the binary is not included, the user/agent would need to obtain it (e.g., from the listed GitHub homepage). Downloading and installing an unsigned binary from an external source is higher risk; the skill does not provide an official, auditable install mechanism in-package.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond the Mail Envelope Index path (which the tool legitimately needs to read). There are no unexplained secret requests.
Persistence & Privilege
Skill flags show no always:true or other elevated persistence. The only persistence-like action in the instructions is copying a CLI binary to /usr/local/bin (normal for CLI tools) which requires write privileges but is not intrinsic to the skill bundle itself.
What to consider before installing
This skill appears to do what it says (query Mail's Envelope Index with sqlite), but there are important inconsistencies to resolve before installing or running anything: 1) The SKILL.md expects a 'mail-search' executable to be copied into /usr/local/bin, yet the skill package contains no binary—verify where that binary is supposed to come from (the GitHub homepage may host it). 2) The SKILL.md metadata requires sqlite3 but the registry metadata reported none—ensure sqlite3 is the only external dependency. Before installing: inspect the upstream GitHub repository and its source code, prefer building the tool from source rather than downloading unsigned releases, verify the binary's integrity (checksums/signatures), and review the code to ensure it only reads the Mail Envelope Index and does not transmit data externally. Avoid running cp/chmod from untrusted instructions; instead fetch/install the tool manually in a controlled environment. If you must grant the tool access to Mail data, consider running it on a disposable account or VM and back up Mail data first. If you want more assurance, provide the repository link and I can point out exact files/lines to review (or confirm whether a bundled binary should have been included).Like a lobster shell, security has layers — review code before you run it.
emailvk9706kex458cwbbadj88yqz96n7ytbz1latestvk9706kex458cwbbadj88yqz96n7ytbz1macosvk9706kex458cwbbadj88yqz96n7ytbz1productivityvk9706kex458cwbbadj88yqz96n7ytbz1sqlitevk9706kex458cwbbadj88yqz96n7ytbz1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📬 Clawdis
OSmacOS
Binssqlite3