weavmail
v1.0.5Use weavmail CLI to manage emails for the current task. Use when you need to read, send, reply to, or move emails as part of completing a task.
⭐ 0· 370·0 current·0 all-time
byYan-ke Guo@yankeguo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md describes installing and using a weavmail CLI to read, send, and move mail. The only declared binary requirement is 'uv', which is used in the install instruction, so the requested artifacts align with the stated purpose.
Instruction Scope
Instructions tell the agent to install weavmail, configure IMAP/SMTP credentials via CLI, sync mailboxes, and read/write local Markdown files under ./mails/. This is expected for an email client. Note: SKILL.md does not state how account credentials are stored (location/encryption), and the client will write local files containing full email bodies and metadata—users should be aware of local storage of potentially sensitive content.
Install Mechanism
There is no packaged install specification in the registry; the docs instruct the user to run 'uv tool install weavmail'. Requiring 'uv' is coherent with that workflow. Installing via 'uv' will fetch external artifacts (normal for CLI tools) — the installer source and trust should be verified before running.
Credentials
The skill declares no required environment variables and the only secrets used are IMAP/SMTP username/password provided through the weavmail CLI—these are appropriate and proportional for an email client. No unrelated credentials or config paths are requested.
Persistence & Privilege
The skill is not marked 'always' and uses normal autonomous-invocation defaults. It will create local mailbox files and a local account config (expected for a CLI mail client). There is no indication it modifies other skills or system-wide settings.
Assessment
This skill appears to do what it says: a CLI email client that will require you to install the weavmail binary (via 'uv') and supply IMAP/SMTP credentials. Before installing, verify you trust the source of the weavmail binary and the 'uv' tool, and prefer an app-specific password for your mail account. Check where weavmail stores account credentials and whether they are encrypted, and be aware it will write email bodies and metadata to a local mails/ directory. The skill can send and move emails (network operations) — follow the HEARTBEAT.md guidance to avoid allowing the agent to act on emails without your explicit instruction.Like a lobster shell, security has layers — review code before you run it.
latestvk972vmxvw14cvyb8tgcrs4jt4x82bykd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsuv