Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Temporam Temp Mail

Provides temporary email receiving functionality using the Temporam API. Use for: generating temporary email addresses, listing emails for a given address, a...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 6 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The declared purpose (temporary email via the Temporam API) matches the included code and OpenAPI, but the registry metadata lists no required environment variables or primary credential while both SKILL.md and the code require TEMPORAM_API_KEY. The omission of the API key from the skill metadata is an incoherence that should be corrected.
Instruction Scope
SKILL.md instructs the agent to use the included Python client and to set TEMPORAM_API_KEY. The runtime actions are limited to calling Temporam's API endpoints. However, SKILL.md and code include examples that start an MCP server (mcp_server.py) which would expose local tools/endpoints — confirm whether you intend to run that server and that it will be deployed in a controlled environment.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded at install time. Code files are included in the bundle (client and MCP server); dependencies (requests, mcp) must be installed manually via pip. No remote or obfuscated install URLs are present.
!
Credentials
The skill requires an API key (TEMPORAM_API_KEY) for Temporam usage (both client.py and mcp_server.py read it and will raise if missing), but the registry metadata does not list any required env vars or primary credential. This is disproportionate to the declared metadata and could lead to accidental use without appropriate credential controls. Also note providing an API key grants the skill network access to read all emails for addresses it queries.
Persistence & Privilege
The skill does not request always: true and has no declared persistent system modifications. It can be invoked by the agent normally. The MCP server, if run, will open a local tool surface — that is normal for tools but should be run intentionally.
What to consider before installing
Before installing: (1) Be aware this skill requires a Temporam API key (TEMPORAM_API_KEY) even though the registry metadata doesn't declare it — do not provide a high-privilege or shared API key. Use a sandboxed or limited-key account. (2) The bundle includes an MCP server (mcp_server.py) that can expose local endpoints if executed — only run that if you expect a local tool server. (3) Verify the source/repository and review the included code yourself; the package expects the requests and mcp Python packages (pip install). (4) Note minor inconsistencies: tool_definition names (get_email_content) vs. client method (get_email_detail) — test the tools you plan to use to ensure they map correctly. (5) Consider whether sending email content to Temporam is acceptable for your data sensitivity: emails fetched via this skill are retrieved from Temporam's service and therefore visible to that third party. If these issues are acceptable and you trust the code/source, proceed with a scoped API key and run in a restricted environment.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk977sh2ptge915d87yxzkchesn834qa6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Temporam Temporary Mail Skill

This skill enables Manus to interact with the Temporam API to manage temporary email addresses. It can generate new email addresses, check for incoming mail, and retrieve email content, which is useful for tasks requiring email verification or temporary communication.

Capabilities

  • Generate Temporary Email Address: Automatically creates a new, unique email address using an available domain from the Temporam service.
  • List Emails: Retrieves a list of emails received by a specified temporary email address.
  • Get Email Content: Fetches the full content of a specific email using its ID.

Usage Instructions

Prerequisites

To use this skill, you must have a valid Temporam API Key. Set it as an environment variable named TEMPORAM_API_KEY in the sandbox environment before invoking any functions from this skill.

export TEMPORAM_API_KEY="YOUR_API_KEY"

Generating a Temporary Email Address

To generate a new temporary email address, use the generate_random_email function from the client.py script. Manus will automatically select an available domain.

Example Prompt:

"请帮我生成一个临时的邮箱地址。"

Internal Action (Manus will execute):

from skills.temporam-temp-mail.scripts.client import TemporamClient

client = TemporamClient()
email_address = client.generate_random_email()
print(f"Generated temporary email: {email_address}")

Listing Emails for an Address

To list emails received by a specific temporary email address, use the list_emails function. You can specify pagination parameters if needed.

Example Prompt:

"查看 test@example.com 这个邮箱收到了哪些邮件。"

Internal Action (Manus will execute):

from skills.temporam-temp-mail.scripts.client import TemporamClient

client = TemporamClient()
email_address = "test@example.com" # Replace with the actual email address
emails = client.list_emails(email_address, page=1, limit=10)
for email in emails:
    print(f"Subject: {email["subject"]}, From: {email["from_email"]}")

Getting Specific Email Content

To retrieve the full content of a particular email, provide the email ID to the get_email_detail function.

Example Prompt:

"获取 ID 为 12345 的邮件内容。"

Internal Action (Manus will execute):

from skills.temporam-temp-mail.scripts.client import TemporamClient

client = TemporamClient()
email_id = "12345" # Replace with the actual email ID
email_detail = client.get_email_detail(email_id)
if email_detail:
    print(f"Email Subject: {email_detail["subject"]}")
    print(f"Email Content: {email_detail["content"]}")

Workflow Example: Email Verification

When a task requires email verification, Manus can perform the following steps:

  1. Generate a temporary email address.
  2. Provide this email address to the service requiring verification.
  3. Periodically call list_emails to check for new emails.
  4. Once a verification email is received, extract the verification link or code using get_email_detail.
  5. Complete the verification process.

References

Files

9 total
Select a file
Select a file to preview.

Comments

Loading comments…