📦 Outlook — 邮件收发助手
v0.1.0通过 Maton 托管 OAuth 与 Microsoft Graph 网关，安全接入 Outlook 邮箱，实现邮件读取、搜索、摘要、草拟与发送等全流程自动化，提升办公效率。
0· 72·0 当前·0 累计
by 下载技能包
最后更新
2026/4/3
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill's code and documentation are coherent: it talks to Maton's Outlook gateway and both helper scripts only use the MATON_API_KEY and make HTTPS requests to gateway.maton.ai/ctrl.maton.ai. However, the registry metadata incorrectly omits the required MATON_API_KEY/primary credential — verify that you will need to provide a Maton API key and that you trust maton.ai and the skill publisher before installing. Confirm the MATON_API_KEY has limited scope (only mailbox access) and rotate/revoke...详细分析 ▾
ℹ 用途与能力
The SKILL.md and bundled scripts consistently call Maton gateway endpoints (gateway.maton.ai and ctrl.maton.ai) and implement Microsoft Graph-style requests; these align with the stated Outlook integration purpose. However, the registry metadata lists no required environment variables or primary credential while SKILL.md and both scripts require MATON_API_KEY — this mismatch is unexpected and noteworthy.
✓ 指令范围
Runtime instructions and scripts are narrowly scoped to mailbox operations via the Maton gateway (list, read, search, draft, send, patch, move, delete). They do not instruct reading local files or other environment variables, and write operations are explicitly gated behind confirmation guidance in the docs.
✓ 安装机制
This is an instruction-only skill with no install spec and no network-based installer. Two small Python helper scripts are included; there are no downloads, archives, or non-standard install actions.
⚠ 凭证需求
The code and SKILL.md require a single secret (MATON_API_KEY) to authenticate to Maton. That is proportionate for an API gateway integration. However, the published registry metadata does not declare this required environment variable/primary credential — an inconsistency that could lead to accidental credential exposure or misconfiguration. Confirm the required MATON_API_KEY before installing and ensure its scope is limited.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable; it does not request persistent or elevated agent/system privileges and does not modify other skills or system configs. Autonomous invocation is allowed (platform default) but not combined with other high-risk flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/4/3
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install maton-outlook
镜像加速npx clawhub@latest install maton-outlook --registry https://cn.longxiaskill.com