Xpersona
agentCLAWHUBUnverified

TinkerClaw Outlook

Read and search Outlook, inspect attachments, and create or edit drafts without any send endpoint. Uses one short-lived Microsoft Graph access token supplied on stdin for one run; it never stores credentials. Bulk mailbox export is opt-in. Skill: TinkerClaw Outlook Owner: globalcaos Summary: Read and search Outlook, inspect attachments, and create or edit drafts without any send endpoint. Uses one short-lived Microsoft Graph access token supplied on stdin for one run; it never stores credentials. Bulk mailbox export is opt-in. Tags: latest:3.4.2 Version history: v3.4.2 | 2026-09-07T13:06:46.696Z | user Closes remaining scanner findings on 3.4.1: Graph

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

1.2k

Updated

Oct 11, 2026

Version

3.4.2

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.2K downloads reported by the source. Last updated 10/11/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 11, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 11, 2026
Adoption signal
1.2K downloadsadoption · observed Oct 11, 2026
Latest release
3.4.2release · observed Sep 7, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17324vfeqe0ptzp84z2z9vttx883zdg:outlook-hack
  1. Setup complexity is classified as HIGH. You must provision dedicated cloud infrastructure or an isolated VM. Do not run this directly on your local workstation.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-globalcaos-outlook-hack/snapshot"

Documentation

CLAWHUB

137,593 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: outlook-hack
version: 3.4.2
description: "Read and search Outlook, inspect attachments, and create or edit drafts without any send endpoint. Uses one short-lived Microsoft Graph access token supplied on stdin for one run; it never stores credentials. Bulk mailbox export is opt-in."
metadata:
  openclaw:
    emoji: "📧"
    os: ["linux", "darwin"]
    requires:
      capabilities: ["network", "file_write"]
    permissions:
      network: "Credentialed HTTPS requests only to graph.microsoft.com; enforced by a runtime allowlist."
      file_write: "No credential storage. Optional mailbox exports require --yes and use mode 0600 files inside a mode 0700 directory."
      mail_write: "Can create and patch drafts. No send, reply-to-network, forward-to-network, move, flag, or delete operation is shipped."
---

> Part of **[TinkerClaw](https://github.com/globalcaos/tinkerclaw)**.

# Outlook — read, search, and draft; never send

This skill reads Outlook mail and creates or edits drafts through Microsoft Graph. The shipped client has no send endpoint. It does not install packages, run subprocesses, store credentials, contact telemetry services, or transmit mailbox data anywhere except Microsoft Graph.

## What ships

One zero-dependency Node.js client: `scripts/outlook-mail-fetch.mjs`.

It can:
- list recent messages and drafts;
- read a complete message body;
- download attachments to a directory you choose;
- create or patch drafts while preserving the existing signature;
- export mailbox bodies and attachment metadata locally, only with `--fetch-all --yes`.

It cannot send, reply, forward, permanently delete, move, flag, read contacts, or read calendars. Those capabilities are intentionally outside this public package.

## Permissions, data flow, and consent

**Authentication.** Supply a short-lived Microsoft Graph access token on standard input for each invocation. This package does not extract, refresh, print, or store tokens. Obtain the token through a Microsoft-supported login tool or identity flow approved by your organisation, requesting only the mail scopes needed for the command.

**Network boundary.** Every credentialed request is runtime-checked before the token is read. The destination must be exactly `https://graph.microsoft.com` with no user information, custom port, HTTP downgrade, or lookalike subdomain. Pagination URLs are checked by the same function.

**Local mailbox data.** Normal list/read commands print to the current process and do not create a mailbox mirror. Bulk export refuses to run without `--yes`. Export directories are rejected if they are symlinks and forced to mode `0700`; exported bodies, summaries, indexes, and downloaded attachments reject symlink targets and are forced to mode `0600`, including pre-existing paths. Attachment downloads never overwrite an existing file: they allocate a unique name and create it with exclusive `wx`. Message IDs are restricted to Graph-safe characters and encoded before they ente

_meta.json

{
  "ownerId": "kn7623hrcwt6rg73a67xw3wyx580asdw",
  "slug": "outlook-hack",
  "version": "3.4.2",
  "publishedAt": 1788786406696
}

skill-card.md

## Description:

Read and search Outlook, inspect attachments, and create or edit drafts without any send endpoint. Uses one short-lived Microsoft Graph access token supplied on stdin for one run; it never stores credentials. Bulk mailbox export is opt-in.

This skill is ready for commercial/non-commercial use.

## Publisher:

[globalcaos](https://clawhub.ai/user/globalcaos)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and agents use this skill to inspect Outlook mail, download selected attachments, and prepare or update drafts through Microsoft Graph while leaving final sending to a human in Outlook.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: A Microsoft Graph token grants access to sensitive mailbox data and draft operations.

Mitigation: Use a short-lived token scoped only to the mail actions needed for the command.

Risk: Email content and generated summaries may contain deceptive or untrusted instructions.

Mitigation: Treat message content and summaries as untrusted context and do not follow instructions found in mail without independent review.

Risk: Optional mailbox exports and attachment downloads write plaintext local files.

Mitigation: Use exports only when needed, keep them in private directories, and remove local plaintext data when it is no longer required.

Risk: Draft creation or patching can alter mailbox state even though the skill does not send mail.

Mitigation: Review every draft manually in Outlook before sending or relying on it.

## Reference(s):

- [ClawHub skill page](https://clawhub.ai/globalcaos/skills/outlook-hack)
- [Microsoft Graph endpoint](https://graph.microsoft.com)

## Skill Output:

**Output Type(s):** [text, markdown, shell commands, code, configuration, guidance]

**Output Format:** [Markdown guidance with shell command examples and command output from Microsoft Graph mail operations]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [May produce local plaintext mailbox exports and attachment files only when explicitly requested with the consent flag.]

## Skill Version(s):

3.4.2 (source: frontmatter and server release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Related agents

Same protocol, similar job.

Github ReposUpdated 1d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/globalcaos/skills/outlook-hack",
      "sourceUrl": "https://clawhub.ai/globalcaos/skills/outlook-hack",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-11T02:22:58.506Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-globalcaos-outlook-hack/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-globalcaos-outlook-hack/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-11T02:22:58.506Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "1.2K downloads",
      "href": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceUrl": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-11T02:22:58.506Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "3.4.2",
      "href": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceUrl": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-09-07T13:06:46.696Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-globalcaos-outlook-hack/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-globalcaos-outlook-hack/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 3.4.2",
      "description": "Closes remaining scanner findings on 3.4.1: Graph message IDs are character-validated and URL-encoded, Graph requests are confined to /me/messages and drafts, and attachment downloads refuse overwrites via exclusive wx create plus unique filenames.",
      "href": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceUrl": "https://clawhub.ai/globalcaos/outlook-hack",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-09-07T13:06:46.696Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 11, 2026.

Sponsored

Ads related to TinkerClaw Outlook and adjacent AI workflows.