📦 one-mail — 统一邮箱CLI
v1.3.0一款命令行工具，一键管理 Gmail、Outlook、网易 163/126 等多邮箱账户，实现收/发邮件、跨账户搜索、统计与账户集中管理，无需切换客户端。
0· 473·1 当前·1 累计
by @huangbaixun下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This repo contains a plausible CLI mail client but has some inconsistencies you should address before installing: (1) The registry metadata claims no required binaries/env but the scripts need gog (for Gmail), curl, jq, python3 and openssl — install those first. (2) setup.sh/accounts.sh will prompt for OAuth client secrets, refresh tokens and app-specific passwords and store them in ~/.onemail/credentials.json (file is chmod 600). If you prefer, use the optional macOS Keychain support or review ...详细分析 ▾
ℹ 用途与能力
The skill legitimately implements unified email management for Gmail, Outlook and NetEase via the included scripts. However the registry metadata claims no required binaries/env while the code clearly depends on external tools (gog, curl, jq, python3, openssl). That discrepancy is unexpected and should be corrected or explained.
✓ 指令范围
SKILL.md and included scripts limit actions to configuring accounts, performing OAuth/IMAP/SMTP flows, fetching/sending mail, and storing credentials under ~/.onemail. Network calls go to expected providers (login.microsoftonline.com, graph.microsoft.com, imap/smtp servers). The setup flow prompts for secrets and stores them locally, which is typical for a CLI mail client.
ℹ 安装机制
No install spec is declared (low registry install risk). There is an install.sh that creates a symlink to a top-level onemail binary, but the repository manifest provided does not include an onemail entrypoint — install.sh may produce a broken link. No remote downloads or third-party archives are used.
⚠ 凭证需求
Registry metadata lists no required env vars or binaries, but the scripts require gog (Gmail), curl, jq, python3 and openssl; they also store OAuth refresh tokens and app-specific passwords in ~/.onemail/credentials.json (chmod 600). The skill requests sensitive secrets interactively (client secrets, refresh tokens, app passwords) — this is expected for an email client but the metadata should declare those dependencies. Credentials are kept locally rather than in a platform-kept secret store unless you opt into macOS Keychain.
✓ 持久化与权限
always is false and the skill does not require forced inclusion. It stores config/credentials under ~/.onemail and updates them (e.g., refresh token rotation) which is normal for this type of tool. It does not modify other skills or system-wide configs beyond creating an optional symlink in /usr/local/bin.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/3/7
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install one-mail
镜像加速npx clawhub@latest install one-mail --registry https://cn.longxiaskill.com