Email Send

Send a quick email via SMTP using `msmtp` without opening a full mail client.

Security Scan

The skill's behavior (sending mail via msmtp) is coherent, but the SKILL.md declares sensitive SMTP env vars that are not listed in the registry metadata — an inconsistency that could allow unexpected credential access.

Purpose & Capability

The name and description (send email via msmtp) match the requirements: msmtp is the only required binary and the provided usage examples show msmtp invocations. Installing msmtp via dnf is proportionate to the stated purpose.

Instruction Scope

The SKILL.md contains only msmtp usage examples and stays within the email-sending scope. It does mention options like --attach without detailed handling for attachments (which is an implementation detail), but it does not instruct the agent to read unrelated files or contact unexpected endpoints.

Install Mechanism

Install uses the dnf package manager to install msmtp — a standard distribution package. This is reasonable, but platform-limited (dnf is for RPM-based Linux). No downloads from arbitrary URLs or archive extraction are present.

Credentials

SKILL.md explicitly says the skill requires SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS environment variables (sensitive credentials), but the registry metadata lists no required env vars or primary credential. That mismatch is concerning: the agent or skill runtime may access sensitive SMTP credentials even though the metadata did not declare them. Requesting SMTP credentials itself is proportionate for sending mail, but the omission from metadata reduces transparency and could lead to unexpected credential use.

Persistence & Privilege

The skill does not request always: true, does not declare config-path access, and does not attempt to modify other skills' configs. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills of this type.

What to consider before installing

This is an instruction-only skill that uses msmtp to send email — that purpose matches the msmtp requirement and dnf install. However, SKILL.md requires SMTP_HOST, SMTP_PORT, SMTP_USER, and SMTP_PASS (sensitive credentials) while the registry metadata lists no required env vars. Before installing, confirm: (1) where and how the agent will obtain or read those environment variables (are they passed automatically or will the agent read your environment?), (2) that you only provide a dedicated SMTP account with minimum privileges, (3) that you trust the skill source (no code to audit here), and (4) the runtime platform uses dnf (otherwise installation will fail). If you proceed, prefer creating a throwaway SMTP account or credentials with limited scope, and test in an isolated environment first.

Email Send Skill

Send a quick email via SMTP without opening the full himalaya client. Requires SMTP_HOST, SMTP_PORT, SMTP_USER, SMTP_PASS env vars.

Sending Email

Send a basic email:

echo "Meeting at 3pm tomorrow." | msmtp [e-mail]

Send with subject and headers:

printf "To: [e-mail]\nSubject: Quick update\n\nHey, the deploy is done." | msmtp [e-mail]

Options

• --cc -- carbon copy recipients
• --bcc -- blind carbon copy recipients
• --attach <file> -- attach a file

Install

sudo dnf install msmtp