📦 AgentMail (Enhanced) — 代理邮箱管理
v1.1.0通过 AgentMail API 为 AI 代理提供程序化邮件能力：一键创建收件箱、收发消息、管理线程、配置 Webhook、Pods 与自定义域名，实现代理邮箱身份、邮件工作流与实时邮件处理。
2· 1.8k·1 当前·1 累计
by @kesslerio下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement a normal email API integration, but there are multiple inconsistencies and missing pieces. Before installing: 1) Verify the skill's origin — source is unknown; prefer skills from trusted publishers. 2) Expect to supply AGENTMAIL_API_KEY (SKILL.md) even though the registry metadata omits it; do not reuse high-privilege or unrelated credentials. 3) Confirm whether the referenced CLI script (./scripts/agentmail-cli) actually exists from the publisher — it's not in th...详细分析 ▾
⚠ 用途与能力
The SKILL.md and reference files consistently describe an email API client (AgentMail) which matches the skill name and description. However the registry metadata lists no required env vars or primary credential while SKILL.md explicitly says it requires AGENTMAIL_API_KEY. The instructions also reference a ./scripts/agentmail-cli script that is not present in the shipped file manifest — this mismatch between claimed capabilities and declared requirements/install footprint is concerning.
ℹ 指令范围
The runtime instructions direct the agent to perform normal email tasks (create inboxes, send/receive, webhook handling, attachment processing). They also reference additional secrets and environment variables in examples (GITHUB_TOKEN, webhook_secret, ngrok authtoken) and show code that reads files (/tmp, attachments) and posts to external endpoints (webhook URLs). Those actions are expected for an email/webhook integration but the presence of undeclared env vars and missing CLI scripts widens the scope beyond what's declared. Also a prompt-injection pattern ('ignore-previous-instructions') was found in SKILL.md, which could attempt to manipulate behavior or evaluations.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files to execute on install, which is lower risk. The docs instruct installing the agentmail Python package via pip (a normal dependency). There are no downloads from arbitrary URLs or extract steps present in the skill bundle.
⚠ 凭证需求
The registry metadata claims no required env vars, but SKILL.md repeatedly requires AGENTMAIL_API_KEY. Examples and guides also reference other sensitive env vars (GITHUB_TOKEN, webhook_secret, ngrok auth token) without declaring them. That mismatch makes it unclear which credentials are actually needed and increases the chance of accidental exposure of unrelated secrets if the user follows examples verbatim.
✓ 持久化与权限
The skill does not request permanent presence (always:false) and does not include install-time scripts that modify agent/system configuration. Autonomous invocation remains allowed (default), which is expected for skills; nothing here elevates persistence or privilege beyond normal skill behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/2
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install agentmail-kessler
镜像加速npx clawhub@latest install agentmail-kessler --registry https://cn.longxiaskill.com