Agentmail To

v1.0.0

Управление агентскими email через agentmail.to: создание, чтение, отправка и очистка временных почтовых ящиков через API и веб-консоль.

⭐ 0· 236·0 current·0 all-time

by@pjotrglushkov-byte

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for pjotrglushkov-byte/agentmail-to.

Previewing Install & Setup.

Prompt PreviewInstall & Setup

Install the skill "Agentmail To" (pjotrglushkov-byte/agentmail-to) from ClawHub.
Skill page: https://clawhub.ai/pjotrglushkov-byte/agentmail-to
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install agentmail-to

ClawHub CLI

Package manager switcher

npx clawhub@latest install agentmail-to

Security Scan

VirusTotal

Suspicious

View report →

OpenClaw

Suspicious

high confidence

Purpose & Capability

The name/description match agentmail.to functionality, but the skill's instructions and bundled config include unrelated-looking credentials (SMTP/AWS-style key) and absolute local paths. The README and SKILL.md imply scripts under /home/pit/.openclaw/workspace/scripts, yet no such scripts are bundled. The presence of SMTP/AWS credentials in config.json is not justified by the declared simple API-based purpose.

Instruction Scope

SKILL.md tells the agent to run Python scripts at absolute paths (/home/pit/.openclaw/workspace/scripts/...) and to read an .env file at that path. Those paths reference local user data and secrets. The skill instructs concrete commands that will access local files and API keys, but the referenced scripts are not included in the package, so their behavior is unknown. The SKILL.md also contains an explicit API key value and example env vars embedded in the instructions, which is a direct secret exposure.

ℹ

Install Mechanism

There is no install spec (instruction-only), which is low-risk for arbitrary code download. The README suggests installing 'browser-use' via pip, but no automated installer is present. Because the skill relies on running local scripts, the lack of included runtime code means the agent may attempt to execute files on the host if they exist — review host scripts before allowing execution.

Credentials

The SKILL.md and config.json embed an AGENTMAIL_API_KEY and an AGENTMAIL_INBOX, but the skill metadata declares no required env vars or config paths. config.json additionally contains smtp_server, smtp_port, username starting with 'AKIA...' (looks like an AWS access key ID), and a password field — credentials unrelated to simple agentmail.to API calls. This is disproportionate and unexplained.

✓

Persistence & Privilege

always is false and the skill is not marked forcibly persistent. Autonomous invocation is allowed (default) — normal for skills. There is no evidence the skill attempts to modify other skills or system-wide agent settings.

What to consider before installing

This skill contains hard-coded secrets and references absolute local paths and scripts that are not bundled — install only after taking these steps: 1) Do not use the embedded API key or config.json credentials; assume they are leaked and rotate any matching keys. 2) Ask the publisher for the missing scripts (swaudiobot_smart_reply.py, create_clean_inbox.py, etc.) and review their source before allowing execution. 3) Remove hard-coded secrets from SKILL.md/config.json and instead provide credentials via an external secret store or environment variables you control. 4) Be cautious because the SKILL.md instructs execution of files under /home/pit — on your system the agent could read local files at those paths if they exist. 5) Prefer to run this skill in an isolated environment or sandbox, and verify the origin of the package (source is unknown) before enabling autonomous invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk970rpcbyfpffad7g93fqt52zs837k69

236downloads

0stars

1versions

Updated 22h ago

v1.0.0

MIT-0

SKILL.md - agentmail-to

Работа с сервисом agentmail.to для управления агентскими почтами. Используйте для создания, чтения, отправки и управления временными/агентскими email адресами через API или веб-интерфейс.

Конфигурация

API ключ хранится в: /home/pit/.openclaw/workspace/scripts/.env.agentmail

Переменные окружения

AGENTMAIL_API_KEY=am_us_9c78f14e6adbd64bae61ad49513bd13d7e0c3b7ff9002a6b8651c58b386165fc
AGENTMAIL_INBOX=swaudiobrain@agentmail.to

Команды

Проверить почту (список сообщений)

python3 /home/pit/.openclaw/workspace/scripts/swaudiobot_smart_reply.py --check-inbox

Отправить ответ

python3 /home/pit/.openclaw/workspace/scripts/swaudiobot_smart_reply.py --send-reply <inbox_id> <to> <subject> <text>

Создать новый ящик

python3 /home/pit/.openclaw/workspace/scripts/create_clean_inbox.py

Скрипты

swaudiobot_smart_reply.py — Умная обработка писем с эскалацией
agentmail_client.py — Базовый клиент для работы с API
clear_agentmail.py — Очистка ящика от старых сообщений
create_clean_inbox.py — Создание нового чистого ящика

Веб-интерфейс

Консоль: https://console.agentmail.to
Документация: https://docs.agentmail.to/quickstart

Comments

Loading comments...