by 安全扫描
OpenClaw
可疑
high confidenceThe skill’s stated purpose (Gmail monitoring) matches the code, but there are multiple inconsistencies and omissions around credentials, config paths, and account names that could lead to accidental credential exposure or unexpected email sending.
评估建议
This skill will access a local JSON config containing email addresses and app_passwords and can send emails. Before installing: 1) Do not assume no credentials are needed — verify where your .gmail-config.json must live and what it contains. 2) Fix the hard-coded path in the script (it uses /Users/your-agent/..., while SKILL.md points to ~/.openclaw/...), or place the config at the exact expected location. 3) Confirm the config keys (account names like 'boris' vs 'agent' vs 'info') match what th...详细分析 ▾
⚠ 用途与能力
Name and description match the code (imap/smtp email monitoring and sending). However, the skill metadata declares no required config or credentials while the included script requires a JSON config containing account emails and app_passwords. That omission is disproportionate to the stated purpose and misleading for users.
⚠ 指令范围
SKILL.md instructs use of a config at ~/.openclaw/workspace/.gmail-config.json and promises confirmation before sending, but the bundled script hard-codes a different absolute path (/Users/your-agent/.openclaw/workspace/.gmail-config.json) and will send immediately when invoked. The runtime instructions and code disagree about config path and user confirmation, increasing risk of accidental credential use or unintended sends.
✓ 安装机制
There is no install spec (instruction-only style) and no downloaded dependencies; the risk from installation is low. Note: a Python script is included and would be executed by the agent when invoked.
⚠ 凭证需求
Registry metadata lists no required env vars or config paths, but the script loads a JSON file containing account emails and app_passwords. This is a mismatch: secret credentials are required in practice but not declared. Also account keys referenced in the code ('boris', 'info') are inconsistent with SKILL.md's account table, increasing the chance of misconfiguration or exposing credentials to the wrong account.
✓ 持久化与权限
The skill is not always-enabled and does not request system-wide changes. Autonomous invocation is allowed (platform default) — combine that with the credential/config omissions above before enabling autonomous use.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
se-gmail-monitor v1.0.0 - Initial release of Gmail monitoring and management skill for Your Agency Name. - Supports dual account handling (info@ and agent@) using IMAP/SMTP. - Provides scripts for listing, reading, sending, and searching emails. - Includes configurable periodic inbox checks for urgent messages and security alerts. - Enforces approval rules for sending emails and auto-replies to maintain security.
● 可疑
安装命令
点击复制官方npx clawhub@latest install se-gmail-monitor
镜像加速npx clawhub@latest install se-gmail-monitor --registry https://cn.longxiaskill.com