技能详情（站内镜像，无评论）
作者：Ada Vale @AdaInTheLab
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.2
统计：⭐ 0 · 142 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：adainthelab/skulk-email
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's code, instructions, and requested resources match its stated purpose (reading via IMAP and sending via DreamHost Roundcube over HTTPS); there are no unexplained credentials, external endpoints, or risky install steps.
目的
Name/description (DreamHost Roundcube send + IMAP read) align with the script's actions: it reads a local credentials JSON, uses imaplib for IMAP access (imap.dreamhost.com / optionally imap.gmail.com) and uses curl to log in and send via webmail.dreamhost.com. Required binaries (python3, curl, jq) are reasonable and documented.
说明范围
SKILL.md instructs the user to store credentials in ~/.config/skulk-email/credentials.json and run the provided script. The script only reads that file, contacts the documented DreamHost/Gmail endpoints, and writes temporary cookies to /tmp; it does not attempt to read other system files or exfiltrate data to unexpected endpoints.
安装机制
There is no install spec (instruction-only plus an included script), so nothing is downloaded or installed by the skill itself. This minimizes install-time risk. The runtime dependencies are standard, documented binaries.
证书
No environment variables, no external API keys, and no unrelated credentials are requested. The only secret required is the mailbox password (DreamHost, and optionally a Gmail app password), stored in the explicitly-documented local JSON file. That storage method and permissions are described in SKILL.md.
持久
The skill is not always-enabled and does not request persistent system-wide changes or modify other skills. It runs on-demand and performs its actions only when invoked.
综合结论
This skill is consistent with its description, but keep these practical safety points in mind: - The script requires storing your mailbox password in plaintext in ~/.config/skulk-email/credentials.json. Ensure the directory (700) and file (600) permissions are applied and only use on machines you trust. Consider using an account with limited privileges or an app-specific password where supported. - The send flow automates a webmail login and s…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Skulk Email」。简介：Email via DreamHost — read inbox, send email, search messages. Send works from …。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/adainthelab/skulk-email/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: skulk-email
description: |
Email via DreamHost — read inbox, send email, search messages. Send works from any VPS (including DigitalOcean) by routing through DreamHost's Roundcube webmail over HTTPS, bypassing SMTP port blocks. Optionally read a shared Gmail inbox via IMAP. Use when: sending email, checking inbox, reading messages, or setting up email for an agent. Dependencies: python3, curl, jq (must be installed on the host). Credentials: DreamHost mailbox email+password stored at ~/.config/skulk-email/credentials.json (user must create this file manually before use; see Setup). No third-party services or API keys needed.
---
# Skulk Email
Read and send email via DreamHost. Optionally read a shared Gmail inbox.
**Key feature:** Sending works from VPS providers that block SMTP (DigitalOcean, etc.) by routing through DreamHost's Roundcube webmail over HTTPS. No third parties. No relay services.
## Requirements
- **python3** — IMAP operations
- **curl** — Roundcube webmail sending
- **jq** — credential file parsing
- **DreamHost mailbox** — email address + password
- **Credential file** — stored locally at `~/.config/skulk-email/credentials.json` (never transmitted beyond DreamHost servers)
## Security
- Credentials are read from a local JSON file with strict permissions (700 dir, 600 file)
- Passwords are only sent over TLS: IMAP SSL (port 993) and HTTPS (port 443)
- No credentials are logged, cached, or sent to any third party
- Cookie files used for Roundcube sessions are per-process and cleaned up on exit
## Setup
### 1. DreamHost mailbox
You need a DreamHost-hosted email address and its password.
### 2. Store credentials
```bash
mkdir -p ~/.config/skulk-email && chmod 700 ~/.config/skulk-email
```
Create `~/.config/skulk-email/credentials.json`:
```json
{
"skulk_email": "you@yourdomain.com",
"skulk_password": "your-dreamhost-mailbox-password",
"gmail_email": "",
"gmail_app_password": ""
}
```
Gmail fields are optional — leave empty if you don't need shared Gmail access.
```bash
chmod 600 ~/.config/skulk-email/credentials.json
```
### 3. Test
```bash
bash scripts/skulk-email.sh test
```
## Commands
```bash
# Test connection
bash scripts/skulk-email.sh test
# Read inbox
bash scripts/skulk-email.sh inbox [limit]
# Check unread count
bash scripts/skulk-email.sh count
# List unread messages
bash scripts/skulk-email.sh unread [limit]
# Read a specific message by ID
bash scripts/skulk-email.sh read <message-id>
# Send email
bash scripts/skulk-email.sh send <to> <subject> <body>
# Search messages
bash scripts/skulk-email.sh search <query> [limit]
# Read shared Gmail inbox (if configured)
bash scripts/skulk-email.sh gmail-inbox [limit]
bash scripts/skulk-email.sh gmail-unread [limit]
bash scripts/skulk-email.sh gmail-count
bash scripts/skulk-email.sh gmail-read <message-id>
```
## How it works
- **Reading:** Direct IMAP to `imap.dreamhost.com:993` (SSL) and optionally `imap.gmail.com:993`
- **Sending:** Authenticates to DreamHost Roundcube webmail via HTTPS, composes and sends through the web interface
- **Dependencies:** `python3`, `curl`, `jq` (standard on most systems)
- **No SMTP ports required.** Works behind any firewall that allows HTTPS.
## Why not just use SMTP?
Many VPS providers (DigitalOcean, some AWS configs) permanently block outbound SMTP ports 25, 465, and 587 to prevent spam. DreamHost's Roundcube webmail operates over HTTPS (port 443), which is never blocked. This skill automates the webmail login and send flow — same as composing email in a browser, just scripted.
## Notes
- First email from a new address may land in spam. Ask recipients to mark "not spam."
- Be reasonable with send volume — this is webmail automation, not a bulk sender.
- Credentials stay local in `~/.config/skulk-email/` — never commit them.
- Script paths are relative to this skill directory.
## Credits
Built by the Skulk 🦊 — [The Human Pattern Lab](https://thehumanpatternlab.com)