📦 mail-imap-sync — 邮件同步
v1.0.3高性能IMAP邮件同步工具，支持多账号增量同步，按时间结构本地存储Markdown邮件，方便AI分析与知识库构建。
0· 65·0 当前·0 累计
by @bettersao下载技能包
最后更新
2026/4/13
安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match its described purpose (IMAP -> local Markdown sync); no network exfiltration or unrelated permissions were found, but it stores credentials in a local config file and run.sh will pip-install dependencies — review those before use.
评估建议
This skill appears to do what it claims (download IMAP mail and save as Markdown), but take these precautions before installing or running it:
- Inspect and edit config.json: the example uses a 'pass' field stored in plaintext. Replace with an application-specific password and remove credentials from bundled files before use. Prefer supplying credentials via a secure mechanism (environment variables, OS keyring, or a secrets manager) rather than committing them to disk.
- Run in an isolated env...详细分析 ▾
✓ 用途与能力
Name/description (IMAP sync -> local markdown store) align with code: main.py uses imaplib to log into IMAP servers, fetch messages, parse them and write Markdown files in an emails/ tree. The included config.json, state.json and SKILL.md describe and match this behavior.
ℹ 指令范围
SKILL.md and run.sh tell the agent to run run.sh which installs two PyPI packages and runs main.py. The runtime reads config.json and state.json and writes files under emails/ and state.json. There are no instructions to read unrelated system files or send data to external endpoints beyond the IMAP servers. Important: credentials are provided in config.json (plaintext) according to the doc, so sensitive data is kept in a local file rather than a secret store.
ℹ 安装机制
No formal install spec in registry, but run.sh executes 'pip install python-dateutil html2text' at runtime. Installing packages from PyPI is normal for Python scripts but will modify the runtime environment — consider running in a virtualenv/container and inspect the packages before installation.
⚠ 凭证需求
The skill does not request environment variables or platform credentials, but it relies on config.json containing account credentials (pass field). Storing IMAP passwords in plaintext in config.json is sensitive and not explicitly addressed in SKILL.md. There is no integration with secret storage or an option to supply credentials via environment variables.
✓ 持久化与权限
Flags show normal privileges (always:false). The skill does not request permanent platform injection, does not modify other skills, and only writes its own state.json and emails/ files.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/4/13
mail-imap-sync 1.0.3 - 邮件本地时间区统一由 Asia/Taipei 修改为 Asia/ShangHai - 相关描述与示例已同步更新时区信息
● 无害
安装命令
点击复制官方npx clawhub@latest install mail-imap-sync
镜像加速npx clawhub@latest install mail-imap-sync --registry https://cn.longxiaskill.com镜像同步中