Bingo Email
v1.0.0统一邮件管理技能，用于读取、发送、回复、转发邮件，以及管理草稿箱和文件夹。 当用户提到"读邮件"、"发邮件"、"回复"、"草稿箱"、"未读邮件"、"收件箱"、 "邮箱"等任何与电子邮件相关的操作时，使用此技能。替代 himalaya CLI， 全部使用 Python 脚本操作任意 IMAP/SMTP 邮箱（腾讯企...
⭐ 0· 25·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (unified email management) matches requested binaries (python3), declared config path (~/.config/bingo-email/config.toml), and included code which implements IMAP/SMTP operations. Required items are proportionate to an email client.
Instruction Scope
SKILL.md instructs the agent to run local commands (check, init, test) and to read/write the declared config file. It does not ask the agent to access unrelated files, environment variables, or send data to third-party endpoints beyond the configured mail servers. The agent will need to read/write the config file (contains credentials) which is expected for this purpose.
Install Mechanism
Install spec uses a single Python package (imapclient) via standard package manager (pip). This is expected; installing Python packages has moderate risk compared with no install, but the package is the minimal dependency needed for IMAP functionality.
Credentials
No environment variables or unrelated credentials are requested. The only sensitive artifact is the per-user config file (~/.config/bingo-email/config.toml) which is the appropriate place to store mailbox credentials for an email client.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide privileges. It writes and reads its own config file under the user's home directory and sets file mode 600 — behavior consistent with an email client.
Assessment
This skill appears to be what it says: an email client that reads and writes a local config file containing your mailbox username and password/authorization code. Before installing, consider: (1) only run it in an account you trust (it needs your mailbox credentials); (2) prefer using app-specific passwords or authorization codes (not your main account password); (3) avoid global pip installs—use a virtualenv or container to limit scope; (4) verify the full script (scripts/bingo_email.py) yourself if you want high assurance—look for any unexpected network calls or endpoints beyond your configured IMAP/SMTP servers; (5) rotate credentials if you ever share the config or suspect compromise. If you accept those points, the skill's requests and instructions are proportionate to its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97c5m1a1yv58dwcv6cn3xrkwh849h93
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📧 Clawdis
Binspython3
Config~/.config/bingo-email/config.toml
Install
uv
uv tool install imapclient