技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 14 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：挂起 · OpenClaw ：可疑
Package：cjboy007/email-smart-reply
安全扫描（ClawHub）
- VirusTotal ：挂起
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and runtime instructions match the stated email-reply purpose, but the package metadata omits required credentials and the runtime performs cross-workspace file access and child-process calls that are not declared—this mismatch and the use of exec/spawnable scripts warrant caution.
目的
Functionality (IMAP fetch → intent classification → KB retrieval → reply generation → Discord review → SMTP send) is coherent with an 'Email Smart Reply' skill. The code references exactly the expected pieces (IMAP, OpenRouter LLM, LanceDB/Obsidian KB, Discord bot, SMTP). However the registry metadata declares no required environment variables or credentials while the code clearly requires multiple secrets and access to other workspace skills …
说明范围
SKILL.md & scripts instruct the agent to read workspace-level .env files, access $WORKSPACE/skills/imap-smtp-email/, scan an Obsidian vault, call external APIs (OpenRouter), push messages to Discord, and invoke external scripts (python search script under vector_store). The code also performs file writes (drafts, reviews-pending) and executes child processes (execSync/execFile). These actions go beyond a simple classifier/generator and require…
安装机制
No install spec (instruction-only with included JS files). That lowers installation risk because nothing is automatically downloaded. However included code invokes other local scripts (Python search script) and expects other workspace components; those external scripts will be executed at runtime (execSync/execFile), so risk comes from runtime execution rather than an installer.
证书
The skill's manifest lists no required env vars, but the code expects and reads multiple sensitive environment variables and paths: OPENROUTER_API_KEY (OpenRouter LLM), DISCORD_BOT_TOKEN, IMAP_USER/IMAP_PASS/IMAP_HOST/IMAP_PORT/IMAP_TLS, VECTOR_STORE_PATH or PYTHON_PATH, KB_PATH, DRAFTS_DIR and a root .env. It also expects access to another skill's directory ($WORKSPACE/skills/imap-smtp-email) and vector_store scripts. Requesting these secrets…
持久
The skill is not marked 'always: true' and does not request elevated agent-wide privileges. It does create and modify files within its own and other workspace directories (drafts, reviews-pending) and sets timeouts for in-process timers. It also calls out to other skill directories ($WORKSPACE/skills/imap-smtp-email/) and thus may modify or create drafts that another skill expects to own — this cross-skill file modification is a privilege/foot…
scripts/discord-review.js:197
检测到Shell命令执行（ child_process ）。
scripts/kb-retrieval.js:29
检测到Shell命令执行（ child_process ）。
scripts/integration-test.js:57
环境变量访问与网络发送相结合。
scripts/intent-recognition.js:117
环境变量访问与网络发送相结合。
scripts/reply-generation.js:24
环境变量访问与网络发送相结合。
scripts/integration-test.js:255
文件读取与网络发送相结合（可能泄露）。
scripts/intent-recognition.js:20
文件读取与网络发送相结合（可能泄露）。
scripts/reply-generation.js:145
文件读取与网络发送相结合（可能泄露）。
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Email Smart Reply (AI-Powered)」。简介：AI-powered email reply generation for B2B sales. Analyzes incoming emails to de…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/cjboy007/email-smart-reply/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。