Alimail Manager

提供阿里邮箱API调用能力，支持用户信息查询、邮件详情获取、邮件搜索；当用户需要查询企业邮箱用户信息、查看特定邮件内容、搜索符合条件的邮件时使用

Security Scan

The skill's code, instructions, and requested environment variables are coherent with its stated purpose of calling the AliMail API to query users and messages.

Purpose & Capability

Name/description, required env vars (ALMAIL_APP_ID, ALMAIL_SECRET), and the npm dependency (alimail-node-sdk) line up with an AliMail API client. The scripts only call user/message/search APIs consistent with the stated capabilities.

Instruction Scope

SKILL.md instructs running the included scripts (get_user, get_message, search_messages) and to install the official SDK. The instructions do not ask the agent to read unrelated files, transmit data to unexpected endpoints, or access additional environment variables beyond the declared ALMAIL_* values. The only internal file referenced for docs is references/alimail-api.md, which documents the API.

Install Mechanism

There is no platform install spec; SKILL.md instructs installing the npm package alimail-node-sdk. That is a normal dependency for a Node.js SDK but does carry typical npm supply-chain risk — the package source/version should be verified before installing in sensitive environments.

Credentials

The skill requires only ALMAIL_APP_ID and ALMAIL_SECRET, which are exactly the credentials needed for OAuth2 client_credentials to call AliMail. No unrelated credentials or secrets are requested.

Persistence & Privilege

Skill flags are default (not always:true). It does not request persistent system privileges or modify other skills. Scripts run ad-hoc and require the SDK and environment variables; nothing indicates elevated or permanent system presence.

Assessment

This skill appears internally consistent with its stated purpose. Before installing, verify the following: (1) only provide ALMAIL_APP_ID and ALMAIL_SECRET for an app with the minimum scopes needed (prefer read-only scopes such as Mail.Read.* and User.Read.* where possible); (2) review or pin the alimail-node-sdk package/version and its source to reduce npm supply-chain risk; (3) run first in an isolated or non-production environment to confirm behavior; (4) rotate credentials if you later remove the skill; and (5) if you are uncomfortable with autonomous agent invocation, disable autonomous use for this skill until you have vetted it.

阿里邮箱管理

任务目标

• 本 Skill 用于：管理阿里邮箱用户和邮件数据
• 能力包含：用户信息查询、邮件详情获取、邮件列表搜索、分页查询
• 触发条件：用户需要查询企业邮箱用户、查看邮件内容、搜索邮件列表

前置准备

• 依赖说明：需要安装阿里邮箱SDK

  npm install alimail-node-sdk
  

• 认证方式：OAuth2 client_credentials
• 必填环境变量：
  • ALMAIL_APP_ID：阿里邮箱应用 ID
  • ALMAIL_SECRET：阿里邮箱应用 Secret

操作步骤

标准流程

1. 执行具体操作

   • 获取用户信息：调用 scripts/get_user.js
   • 获取邮件详情：调用 scripts/get_message.js
   • 搜索邮件：调用 scripts/search_messages.js

2. 处理结果

   • 解析返回的JSON数据
   • 根据业务需求提取关键信息
   • 提供清晰的总结和建议

可选分支

• 当 需要获取扩展字段：在参数中指定 select 字段
• 当 需要分页查询：使用 search_messages.js 的 cursor 机制
• 当 遇到API限流：SDK会自动处理重试，建议适当降低请求频率

资源索引

• API参考：
  • references/alimail-api.md (何时读取：需要了解API参数、字段定义、KQL查询语法)

注意事项

• 邮件搜索支持KQL查询语法，详见参考文档
• 使用时必须配置 ALMAIL_APP_ID 和 ALMAIL_SECRET

使用示例

示例1：获取用户信息

node scripts/get_user.js --email "[e-mail]" --select "phone,managerInfo"

示例2：获取邮件详情

node scripts/get_message.js --email "[e-mail]" --message-id "AAMkAGI2T..." --select "body,toRecipients"

示例3：搜索邮件

node scripts/search_messages.js --email "[e-mail]" --query 'fromEmail="[e-mail]"' --size 20