Near Email Reporter

Send NEAR reports and alerts via email with SMTP configuration, scheduling, and automatic reporting.

Security Scan

The skill's code and instructions are internally consistent with its stated purpose: it stores SMTP config locally, queries the NEAR RPC, and prints/generates reports; it does not request unrelated credentials or contain obvious exfiltration.

Purpose & Capability

Name/description (send NEAR reports via email) matches what the files do: the CLI accepts SMTP settings, stores them in ~/.near-email/config.json, and queries rpc.mainnet.near.org for account info. No unrelated services, credentials, or binaries are requested.

Instruction Scope

SKILL.md and README describe CLI usage and storing config in ~/.near-email. The runtime instructions and the script only read/write that config file and call the NEAR RPC; they do not instruct the agent to read other system files, environment variables, or send data to unexpected third-party endpoints.

Install Mechanism

There is no install spec (instruction-only), which is low risk. The package includes a script but does not bundle nodemailer; README and comments instruct the user to run `npm install nodemailer` to enable sending. This is not inherently risky but requires the user to install a dependency themselves.

Credentials

The skill declares no required environment variables and the script uses a locally stored SMTP username/password provided via CLI. That is proportionate to an email-sending reporter. Credentials are kept in ~/.near-email/config.json with file mode 0o600 in the code.

Persistence & Privilege

The skill is user-invocable, not always:true, and does not modify other skills or system-wide settings. Its only persistent artifact is its own config file under the user's home directory.

Assessment

This skill appears coherent but review and take these precautions before installing: 1) Inspect the script (scripts/emailer.js) yourself — it stores SMTP credentials in ~/.near-email/config.json and will query rpc.mainnet.near.org. 2) Use an app-specific or limited-scope SMTP password (e.g., Gmail App Passwords) rather than your primary account password. 3) Confirm config permissions (mode 600) and that the config file is stored where you expect. 4) The skill does not include nodemailer; run npm install in a controlled environment and review that dependency before use. 5) Scheduling requires an external scheduler or background process — ensure you don't run persistent jobs with elevated privileges. 6) Because the skill source and publisher are unknown, prefer running it in a restricted environment or container until you are comfortable with the code.

NEAR Email Reporter Skill

Send NEAR transaction reports via email with scheduling.

Description

This skill allows you to configure email settings, send NEAR transaction reports, set up alerts, and schedule periodic email reports. Uses standard SMTP with secure configuration storage.

Features

• Configure SMTP email settings
• Send transaction reports via email
• Set up alerts for specific events
• Schedule periodic reports
• Secure configuration storage

Commands

near-email setup [options]

Configure email settings.

Options:

• --host <host> - SMTP server host
• --port <port> - SMTP server port (default: 587)
• --user <user> - SMTP username
• --pass <pass> - SMTP password
• --from <email> - From email address
• --secure - Use SSL/TLS (default: false)

Example:

near-email setup --host smtp.gmail.com --port 587 --user [e-mail] --pass mypassword --from [e-mail]

near-email report <account_id> [recipient]

Send a transaction report for an account.

Parameters:

• account_id - NEAR account to report on
• recipient - Email recipient (optional, uses default)

near-email alert <account_id> <threshold> [recipient]

Set up balance alert for an account.

Parameters:

• account_id - NEAR account to monitor
• threshold - Balance threshold (in NEAR)
• recipient - Email recipient (optional)

near-email schedule <account_id> <cron_expr> [recipient]

Schedule periodic email reports.

Parameters:

• account_id - NEAR account to report on
• cron_expr - Cron expression (e.g., "0 9 * * *" for daily at 9am)
• recipient - Email recipient (optional)

Configuration

Email settings are stored in ~/.near-email/config.json with secure permissions.

Requirements

• SMTP email account (Gmail, SendGrid, etc.)
• Node.js for running the scripts

Notes

• For Gmail, use App Passwords: https://myaccount.google.com/apppasswords
• Configuration file is stored securely with limited permissions

References

• Nodemailer: https://nodemailer.com/
• NEAR RPC API: https://docs.near.org/api/rpc