The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes functionality to automatically fetch and refresh email credentials from a remote gateway (jprx.m.qq.com) via a local proxy (localhost:19000). This is a functional requirement for the skill's automated account management features.
[DATA_EXFILTRATION]: No malicious exfiltration was detected. The skill implements security controls to prevent unauthorized file access by requiring users to define ALLOWED_READ_DIRS and ALLOWED_WRITE_DIRS in the configuration. The code validates that all file reads and attachment downloads stay within these specified boundaries.
[COMMAND_EXECUTION]: The skill uses standard shell and batch scripts (email_gateway.sh, email_gateway.cmd) to orchestrate Node.js execution for IMAP and SMTP tasks. These executions are limited to internal logic for processing emails.
[SAFE]: The skill follows security best practices, including implementing a sanitizeFilename function to mitigate path traversal risks when downloading attachments and using chmod 600 to protect the .env configuration file containing sensitive credentials.

imap-smtp-email