AgentMail
API-first email platform designed for AI agents. Create and manage dedicated email inboxes, send and receive emails programmatically, and handle email-based workflows with webhooks and real-time events. Use when you need to set up agent email identity, send emails from agents, handle incoming email workflows, or replace traditional email providers like Gmail with agent-friendly infrastructure.
v1.1.1
2026/01/26
🔒 Security: Webhook allowlist to prevent prompt injection
Security Scan
状态
suspicious
OpenClaw
gpt-5-mini
OpenClaw 分析
The skill mostly does what its name says (an API-first email integration), but there are notable inconsistencies and operational instructions that touch system agent config and undeclared secrets — review before installing or running any scripts.
置信度: high
VirusTotal
Type: OpenClaw Skill Name: agentmail Version: 1.1.1 This skill bundle is designed for an AI agent to interact with the AgentMail API for email management. All provided scripts (`check_inbox.py`, `send_email.py`, `setup_webhook.py`) and documentation (`API.md`, `WEBHOOKS.md`, `EXAMPLES.md`) are clearly aligned with this stated purpose. Critically, the `SKILL.md` file explicitly warns about prompt injection risks from incoming emails and provides detailed defensive measures (webhook allowlisting, isolated sessions) for the agent to implement, demonstrating a strong security-conscious design rather than malicious intent. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The local test server in `setup_webhook.py` is clearly for development and does not pose a threat.