email-manager-pop3

查询和发送邮件，支持 POP3 协议收件、SMTP 协议发件

Security Scan

The skill's files and instructions are consistent with a POP3/SMTP email manager and request credentials via a local config file (not via unrelated env or services), but the provided source preview is truncated and you should review the full code and secure the config before use.

Purpose & Capability

Name, description, SKILL.md and code align: the skill implements POP3-based retrieval and SMTP sending, and it asks the user to create a local config.yaml with email host, username and password—which is expected for this purpose.

Instruction Scope

SKILL.md instructs creating a local config.yaml and describes expected operations (list, read, delete, send). It does not instruct reading unrelated system files or exfiltrating data to third-party endpoints; the code operates against the configured mail servers.

Install Mechanism

No install spec; only a small requirements.txt (PyYAML) is listed. This is low-risk and proportional for a Python-based skill that reads YAML config and uses standard poplib/smtplib.

Credentials

No environment variables or external credentials are requested; credentials are expected in a local config.yaml file. This is reasonable, but storing plaintext credentials in config.yaml is sensitive—SKILL.md advises using app passwords and encryption, which is appropriate.

Persistence & Privilege

Skill does not request always:true, has no special OS or config-path requirements, and does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) and appears acceptable given the skill's scope.

Assessment

This skill appears to be what it says: an email client that reads a local config.yaml for email server, username and password and then uses poplib/smtplib. Before installing or using it: - Review the full email_manager.py file (the preview you were shown is truncated) to confirm there is no hidden network call, logging of credentials, or hard-coded remote endpoints. - Use an application-specific password (not your main account password) and restrict file permissions on config.yaml (e.g., chmod 600). Consider encrypting credentials or using a secrets store if available. - Test against a throwaway mailbox first to ensure behavior (especially delete_mail) is safe and works as expected. - Confirm the code uses self.config['password'] (or equivalent) and not an unexpected config key; address any obvious bugs (the preview shows a truncated server.login line) before use. - If you need higher assurance, run the skill in an isolated environment or container and inspect network traffic while exercising features to ensure it only communicates with your configured mail servers.

Email Manager

一个用于查询和发送邮件的 OpenClaw 技能，支持 POP3 协议接收邮件和 SMTP 协议发送邮件。

配置说明

在技能目录下创建 config.yaml 配置文件：

email:
  host_pop3: pop.example.com      # POP3 服务器地址
  host_smtp: smtp.example.com      # SMTP 服务器地址
  port_pop3: 995                   # POP3 端口 (SSL 通常为 995)
  port_smtp: 465                   # SMTP 端口 (SSL 通常为 465 或 587)
  username: [e-mail] # 邮箱账号
  password: your_app_token         # 授权码或密码
  use_ssl: true                    # 是否使用 SSL

使用方法

查询收件箱

• 获取未读邮件列表
• 读取指定邮件内容
• 查询邮件数量

发送邮件

• 发送文本邮件
• 指定收件人、主题、正文
• 支持抄送 (CC) 和密送 (BCC)

安全提示

• 建议使用邮箱服务商提供的「授权码」而非登录密码
• 配置文件包含敏感信息，请妥善保管
• 生产环境建议使用加密方式存储密码