Email Intelligence Agent

Connect to IMAP mailboxes to classify emails by urgency, generate multi-language reply suggestions, and push summaries to Feishu in real time.

Security Scan

The skill mostly does what it claims (read IMAP, classify, generate replies, push to Feishu) but there are clear inconsistencies and privacy/billing surprises (missing registry declarations for required credentials/config, and a third‑party billing endpoint receiving your Feishu user id).

Purpose & Capability

The code implements IMAP reading, AI classification, reply generation, and Feishu pushing which matches the description. However the registry metadata claims no required env vars/config paths while SKILL.md and the code require IMAP credentials (in config/config.yaml), AI provider credentials, Feishu push credentials, and SkillPay billing keys — this mismatch is incoherent and unexpected.

Instruction Scope

Runtime instructions and check_emails.py access environment variables (FEISHU_USER_ID, SKILL_BILLING_API_KEY, SKILL_BILLING_SKILL_ID) and a config file for IMAP credentials and AI config. The skill sends email summaries (including bodies) to Feishu and transmits FEISHU_USER_ID to an external billing endpoint (skillpay.me). SKILL.md asserts FEISHU_USER_ID is used only for billing and not stored/shared, but the code does transmit it to skillpay.me — the claim can't be independently verified and is a privacy risk.

Install Mechanism

No install spec — code is provided as files (Python scripts) and will be executed from source. That reduces installer-level risk, but the included code means the skill is not just an instruction-only manifest; users should inspect the scripts before running them.

Credentials

Requested credentials (IMAP username/password, Feishu webhook/app token, AI API key) are proportionate to function, but the registry advertises none. Additional required billing keys (SKILL_BILLING_API_KEY, SKILL_BILLING_SKILL_ID) and FEISHU_USER_ID are documented in SKILL.md and used in code. Transmitting FEISHU_USER_ID to skillpay.me is a non-obvious data flow and may be unexpected by users. The mismatch between declared requirements (none) and actual required secrets is a red flag.

Persistence & Privilege

The skill is not set always:true and does not modify other skills or system settings. However it can be invoked autonomously (default), and if granted credentials it can read email and push contents externally — autonomous invocation combined with the credential/data‑flow concerns increases risk and should influence deployment decisions.

What to consider before installing

Key things to consider before installing: 1) The registry metadata omits required secrets/config — SKILL.md and the scripts actually require IMAP credentials (in config/config.yaml), AI API keys, Feishu webhook/app token, and billing keys. That mismatch is suspicious; ask the publisher why the registry lists no required env vars or config paths. 2) The skill transmits FEISHU_USER_ID to an external billing endpoint (https://skillpay.me). If you care about privacy, verify that you trust that service and the payment flow. 3) The code will read full email bodies and can push them to Feishu — limit the account access you give (use app-specific passwords, read-only IMAP, and a minimal Feishu webhook with a dedicated bot or channel). 4) Because the package includes runnable Python scripts, inspect or run them in a sandbox before providing real credentials. 5) If you allow autonomous invocation, consider the blast radius: an autonomous run with valid IMAP credentials could transmit email contents to external services. 6) Prefer installing only from a known/published source (homepage, repo, or verified publisher). If you proceed, test with a throwaway mailbox and minimal permissions first.

IMAP Email Read → AI Classification → Reply Suggestions → Feishu Push Summary

Slug: email-intelligence-agent Price: $0.01 USDT per call Author: 91Skillhub Team

---

Overview

Feature	Description
IMAP Email Read	Connect to any IMAP mailbox (QQ/163/Enterprise/Gmail, etc.)
AI Classification	Urgent / Important / Normal / Can Wait
Reply Suggestions	AI generates multilingual reply suggestions, confirmed by user before sending
Feishu Push	Summary card pushed to Feishu group or DM

---

Tiered Features

Feature	FREE	PRO
Email read & classification	Keyword-based	AI-powered
Reply suggestions	—	Yes
Feishu push	—	Yes
Max emails per run	10	Unlimited
Price	Free	$0.01/call

---

Quick Start

1. Configure Email (IMAP)

IMAP Config:
- Server: imap.example.com
- Port: 993 (SSL)
- Username: [e-mail]
- Password: App-specific password (NOT your login password)

Tip: Use an App Password from your email provider's security settings

2. Configure AI API

Supports OpenAI-compatible API (OpenAI, Claude, domestic models, etc.)

3. Configure Feishu Push

Set up a Feishu bot webhook or user_id to receive push notifications.

---

Classification Labels

Label	Example Keywords
Urgent	refund, cancel order, complaint, negative review, urgent
Important	after-sales, repair, payment, invoice, account issue
Normal	inquiry, price, specs, logistics, shipping
Can Wait	hello, thank you, goodbye, already handled

---

Billing

• Pay-per-call: $0.0100 USDT per execution via SkillPay.me
• Balance insufficient: Payment URL returned — top up at https://skillpay.me/email-intelligence-agent
• External data flow: FEISHU_USER_ID transmitted to skillpay.me/api/v1/billing for billing identification only; not stored or shared with any third party
• Billing model: Each run = 1 call = $0.0100 USDT
• Privacy: FEISHU_USER_ID is used solely to identify the billing account; no personal data is retained or shared beyond the payment processor

---

Required Environment Variables

Variable	Description
SKILL_BILLING_API_KEY	SkillPay Builder API Key
SKILL_BILLING_SKILL_ID	SkillPay Skill ID (email-intelligence-agent)
FEISHU_USER_ID	User open_id for billing (passed by Feishu runtime)

---

Directory Structure

email-customer-assistant/
├── SKILL.md
├── scripts/
│   ├── check_emails.py      # Main script + billing
│   ├── imap_client.py       # IMAP connection wrapper
│   ├── classifier.py         # Keyword + AI classifier
│   ├── reply_generator.py    # Reply generator
│   └── feishu_pusher.py      # Feishu pusher
└── requirements.txt

---

Usage Limits

• Read-only emails — no sending or deleting
• IMAP access only — no direct platform API calls
• Complies with email provider terms of service

---

License

MIT