ClawHub

imap-smtp-email

v0.0.10

Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Sup...

⭐ 89· 38k·407 current·424 all-time
by@gzlicanyi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description (read/send email via IMAP/SMTP) match the included scripts (imap.js, smtp.js, config.js) and the setup helper. Required binaries (node, npm) and dependencies are appropriate for the task. No unrelated services or credentials are requested.
✓
Instruction Scope
SKILL.md instructs running setup.sh and using the provided CLI scripts; the runtime instructions and code operate on mail servers and local files only (with explicit ALLOWED_READ_DIRS/ALLOWED_WRITE_DIRS enforcement). Commands do not attempt to read unrelated system files or call unexpected external endpoints.
✓
Install Mechanism
There is no remote install/download step — the skill is instruction/code bundled with the package. Dependencies are standard npm modules declared in package.json (traceable). No arbitrary URL downloads or extracted archives are used.
ℹ
Credentials
The skill requires users to store email credentials (IMAP/SMTP user/pass) in a local ~/.config/imap-smtp-email/.env file (or a fallback .env). This is necessary for IMAP/SMTP access but is sensitive: the setup script sets strict permissions (700/600). The skill does not request unrelated credentials or external tokens.
✓
Persistence & Privilege
The skill does not request always:true and does not alter other skills or system-wide configs. It persists user configuration under the user's home directory (expected for an email client).
Assessment
This skill appears to do exactly what it says: read/send email via IMAP/SMTP. Before installing: (1) verify the skill source if you require provenance (homepage is missing), (2) use service-specific app passwords or authorization codes (especially for Gmail) rather than your primary account password, (3) confirm ALLOWED_READ_DIRS and ALLOWED_WRITE_DIRS are set to narrow folders so attachments and file reads/writes are limited, and (4) be aware setup.sh will store credentials in ~/.config/imap-smtp-email/.env (the script sets file mode 600). The setup will also perform connection tests (it may send a test email to your address). If you need higher assurance, review the included scripts locally before running setup.

Like a lobster shell, security has layers — review code before you run it.

latestvk970b4d786dq86jtjebq3nxavs830rtj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📧 Clawdis
Binsnode, npm

Comments