Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

medal-email-quote

v1.0.0

General-purpose ecommerce inquiry email automation skill. Periodically fetches customer inquiry emails, detects and translates languages, stores email data l...

0· 65·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for fankcoder/auto-quote-mailer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "medal-email-quote" (fankcoder/auto-quote-mailer) from ClawHub.
Skill page: https://clawhub.ai/fankcoder/auto-quote-mailer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install auto-quote-mailer

ClawHub CLI

Package manager switcher

npx clawhub@latest install auto-quote-mailer
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The code files implement IMAP fetching, language detection/translation, local archiving, and quotation generation as advertised. The libraries and logic are consistent with an ecommerce email-quote automation tool.
Instruction Scope
SKILL.md instructs editing a config file and running scripts/email_check.py; the actual configuration file is config/config.py (path mismatch). The runtime instructions and code only access IMAP, local storage, and translation libraries — they do not attempt to read unrelated system files. However the agent will handle real email content and may send text to third‑party translation services (googletrans) if enabled.
Install Mechanism
No install spec in the registry; this is an instruction/code bundle with a requirements.txt. Dependencies (pandas, langdetect, googletrans) are typical Python packages. No remote arbitrary downloads or extract steps are present in the manifest.
!
Credentials
The skill requires IMAP credentials (username/password) to operate, but the registry metadata declares no required environment variables or primary credential. Credentials are expected to be placed into config/config.py (plaintext in the project), which is inconsistent and risky. Translation settings also include a 'baidu_secret' placeholder. The absence of a declared credential in metadata may mislead users about what secrets will be needed.
Persistence & Privilege
The skill is not forced-always, does not modify other skills or system-wide settings, and only writes its own local storage directories. Running the optional daemon will periodically poll email per user-configured schedule (normal for this use case).
What to consider before installing
This package mostly does what it says (IMAP fetch → translate → generate quotes), but review these before installing: 1) Credentials: it expects your email username/password in config/config.py (plaintext). Do not put production credentials into repository files — prefer environment variables or a secrets store and update the code to read them securely. 2) Metadata mismatch: the registry lists no required credentials, so the skill may ask you to edit a config file instead of requesting an env var — be prepared to supply an email account (use an app‑specific/password and a dedicated mailbox). 3) Privacy/network: translations using googletrans or other engines will send email text to remote services (Google/Baidu); if customer data is sensitive, disable automatic translation or use a paid/private API with explicit data handling guarantees. 4) Docs/path mismatch: SKILL.md refers to scripts/config.py but the actual path is config/config.py — double-check where to edit. 5) Run in isolation: test with a throwaway email account and sample emails to verify behavior and that no unexpected external endpoints are contacted. If you accept the tradeoffs, consider hardening (move credentials to env vars, limit daemon scope/permissions, and review third-party library behavior).

Like a lobster shell, security has layers — review code before you run it.

latestvk978g4t6nx207v4f56wn05qg5d84redr
65downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Ecommerce Inquiry Email Automation Skill

Overview

This skill automates the processing of customer inquiry emails for ecommerce businesses:

  1. Scheduled Email Retrieval
    Automatically fetch incoming inquiry emails from mailbox

  2. Language Detection & Translation
    Detect email language and translate into a target language (default: English)

  3. Local Archiving
    Store raw emails, parsed content, and translated versions

  4. Quotation Generation
    Generate structured quotation replies based on pricing rules and product parameters


Core Features

1. Email Retrieval

  • Supports IMAP protocol
  • SSL/TLS secure connection
  • Configurable polling interval (default: every 30 minutes)
  • Processes only unread emails and marks them as handled

2. Language Detection & Translation

  • Automatically detects email language
  • Translates non-target-language content via translation APIs (Google, DeepL, etc.)
  • Stores both original and translated versions

3. Local Storage Structure

email_storage/ ├── raw/ # Raw emails (.eml format) ├── text/ # Extracted plain text ├── translated/ # Translated content └── quotes/ # Generated quotation drafts


4. Quotation Engine

  • Calculates pricing based on:
    • Product type / material
    • Size or specifications
    • Quantity
    • Manufacturing process or customization options
  • Applies tiered discount rules
  • Generates professional email reply templates

Configuration

Before using, edit scripts/config.py:

  • IMAP server (host, port, email, password)
  • Translation API (optional)
  • Local storage directory
  • Pricing data file paths
  • Default language settings

Usage

Run single check

python scripts/email_check.py

Comments

Loading comments...