by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's code and docs generally match the stated purpose (reading Outlook and saving attachments) but there are coherence and privacy/usability issues (undeclared dependencies, a hard-coded user path, vague automation instructions that could cause forwarding/exfiltration) that warrant caution before installing.
评估建议
This skill appears to implement what it claims, but review several points before using: 1) It requires pywin32/win32com and only works on Windows — install pywin32 and run on a Windows machine. 2) Change the hard-coded SAVE_DIR to a safe path you control; do not run it with the developer's path. 3) Avoid auto-forwarding emails to external recipients or an 'AI assistant' — that would expose sensitive mailbox data. 4) Be cautious with automatic extraction of ZIPs or saving attachments — scan saved...详细分析 ▾
ℹ 用途与能力
Name/description (read Outlook and download attachments) align with the code and SKILL.md: both show use of the Windows COM interface (win32com) to search messages and save attachments. However, the package does not declare required dependencies (pywin32) or mention that it only works on Windows; the code includes a hard-coded save path (C:\Users\jw0921\Desktop\GF_Bills) which is specific to the developer environment and not appropriate as a default.
⚠ 指令范围
The SKILL.md instructions are explicit about using Outlook COM to enumerate folders, read messages, save attachments and even extract ZIPs — all within scope. Concerns: (1) it suggests automations that could cause data to be forwarded (e.g., '转发给AI助手') which would expose message contents externally if implemented; (2) it recommends a 'cron' scheduling line which is inappropriate for Windows (confusing guidance); (3) recursive folder search and automatic saving/extraction of attachments increases risk of saving/executing malicious payloads. The instructions give the agent latitude to search all folders and handle attachments, which has privacy implications.
ℹ 安装机制
No install spec (instruction-only + included script), so nothing is downloaded during install — that lowers installer risk. But the bundled Python script depends on win32com (pywin32) which is not declared; absence of dependency metadata is an incoherence (user may run and encounter errors or manually install packages).
ℹ 凭证需求
The skill requests no environment variables or credentials, which is consistent with local Outlook COM access. That is proportionate. Caveats: (1) the script uses a hard-coded user-specific SAVE_DIR which may leak path information or overwrite user data; (2) SKILL.md suggests forwarding emails to an 'AI assistant' — while not implemented in code, that instruction could lead users to configure forwarding and thus exfiltrate sensitive data.
✓ 持久化与权限
Flags show no special privileges (always:false, agent invocation allowed). The skill does not attempt to modify other skills or system-wide settings. The only persistence-like suggestion is scheduling (cron) or Outlook rules discussed in docs — these are user actions, not performed by the skill itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
Initial release of the Outlook 邮件读取技能. - Automatically reads Outlook emails, searches for specified subjects, and downloads attachments. - Supports searching by multiple keywords and across all email folders. - Provides attachment handling, including file type checks and ZIP extraction. - Includes sample scripts, automation suggestions, and troubleshooting tips. - Offers documentation for folder IDs and potential usage scenarios.
● 可疑
安装命令
点击复制官方npx clawhub@latest install outlook-reader
镜像加速npx clawhub@latest install outlook-reader --registry https://cn.longxiaskill.com