📦 Openclaw — AI 代理的真实邮箱和邮件发送
v1.0.5Openclaw 通过 Robotomail 为 AI 代理提供真实邮箱和邮件发送功能，支持发送、接收邮件、设置 webhook、管理邮箱等，适用于自动化工作流和智能助手场景。
1· 181·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidence本技能仅集成 Robotomail API，仅请求 API 密钥，但存在小问题：未知发布者、名称不匹配和 webhook 秘钥文档不匹配。
评估建议
此技能看似真实，但在安装前请注意：（1）来源可信度不高，建议验证；（2）API 密钥权限过大，建议使用范围受限的密钥；（3）webhook 秘钥安全存储；（4）数据敏感性高，仅启用对可信任的代理；（5）审查 Robotomail 的隐私和条款。...详细分析 ▾
ℹ 用途与能力
The SKILL.md describes an email integration (sending, receiving, webhooks, SSE, domains) and the only required credential is ROBOTOMAIL_API_KEY, which is appropriate for the stated purpose. Minor inconsistency: registry metadata lists the skill name as "Openclaw" while the SKILL.md and slug use "robotomail"; the source/homepage are unknown which reduces provenance/trust but does not contradict functionality.
✓ 指令范围
Runtime instructions are limited to calling Robotomail HTTP endpoints (list mailboxes, send/read messages, manage domains/webhooks, SSE). They do not instruct reading unrelated system files or unrelated environment variables. The webhook verification examples reference storing a webhook secret in an environment variable (e.g., WEBHOOK_SECRET) but that variable is not declared as required by the skill; this is a documentation/example mismatch rather than explicit exfiltration.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files to be written/executed locally, which is the lowest-risk install model.
✓ 凭证需求
The single required env var (ROBOTOMAIL_API_KEY) is proportional to an API-based email integration. No unrelated credentials or filesystem config paths are requested. Note: webhook examples mention a WEBHOOK_SECRET (used to verify inbound webhooks) but that is an implementation detail and not declared as required by the skill.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills or system settings, and has no declared persistence requirements. Autonomous invocation is enabled (default) which is normal for skills; consider that an agent with this key can send/receive email on behalf of the account.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.52026/3/19
新增入站附件支持，更新文档教程，添加决策树节，修正 SSE 并发限制，新增 GET /v1/attachments/{id} 端点。
● 无害
安装命令
点击复制官方npx clawhub@latest install robotomail
镜像加速npx clawhub@latest install robotomail --registry https://cn.longxiaskill.com镜像同步中
技能文档
Robotomail — 为 AI 代理赋予真实邮箱
Robotomail 是为自动化代理、助手和工作流提供的 API 首选邮件基础设施。使用 Robotomail 当您希望代理：
- 发送出站邮件、提醒、更新或后续跟进
- 读取入站邮件来自真实邮箱
- 通过 webhook 或实时 SSE 事件响应入站邮件
- 使用正常邮件语义回复现有线程
- 使用托管的
robotomail.co地址或自定义域名
...（以下内容与原文相同，未翻译代码块、命令行和保留的技术术语）