Skill flagged — review recommended

ClawHub Security found sensitive or high-impact capabilities. Review the scan results before using.

M365 Spam Manager

v0.1.2

Manages Microsoft 365 junk mail by analyzing spam patterns, scoring suspicious emails, and assisting with review or automatic cleanup of Outlook/Exchange spa...

0· 625· 2 versions· 2 current· 2 all-time· Updated 57m ago· MIT-0
byThomas J. Radman@tradmangh

Install

openclaw skills install m365-spam-manager

M365 Spam Manager (Microsoft Graph)

Installation

Requires Node.js + npm install in the skill folder:

cd skills/m365-spam-manager
npm install

Setup

Uses the same profile/credentials as m365-mailbox. Ensure you have a profile configured:

node skills/m365-mailbox/scripts/setup.mjs --profile tom-business ...

Usage

Review mode (default) — user must approve each action

# Analyze junk folder and show suspicious scores (review mode - default)
node skills/m365-spam-manager/scripts/analyze.mjs --profile tom-business-mail --mailbox radman@e-ola.com

# Move a false positive to inbox (requires confirmation)
node skills/m365-spam-manager/scripts/move-to-inbox.mjs --profile tom-business-mail --mailbox radman@e-ola.com --id <MSG_ID>

# Move confirmed spam to learning folder
node skills/m365-spam-manager/scripts/move-to-learning.mjs --profile tom-business-mail --mailbox radman@e-ola.com --id <MSG_ID>

Automatic mode (no confirmation)

# Auto-clean: move high-confidence spam to learning, medium to review
node skills/m365-spam-manager/scripts/auto-clean.mjs --profile tom-business-mail --mailbox radman@e-ola.com --threshold 80

Suspicious Score Calculation

The analyzer calculates a score (0-100) based on:

PatternPointsDescription
No unsubscribe link+20Legitimate marketing must have one
Suspicious sender domain+15Free email, misspellings, random strings
All caps subject+10Spam often shouts
Excessive punctuation+10!!!, ???, $$$
Suspicious keywords+15crypto, win, free, urgent, verify, bank, password, ...
Mismatched language+10Subject in DE, body EN or vice versa
Known scam patterns+25"Attention - suspected SPAM", fake invoices
Free email provider+10gmail, yahoo, hotmail in From (not Reply-To)
No DKIM/SPF indication+5Graph doesn't show auth results

Score thresholds

  • 0-30: Low suspicion — likely legitimate
  • 31-70: Medium — review recommended
  • 71-100: High — almost certainly spam

Policy

This skill respects the same policy as m365-mailbox:

  • read: autonomous (analyze, list)
  • move: controlled (move to inbox/learning folder)

In review mode, the script always prompts for confirmation before moving emails.

Version tags

latestvk975n5fqjdzyx6z74bn355k70981fx4t