360 Secure SkillHub
360 安全技能中心

ClawInboxRAG

社区 Skill:以「mail ...」聊天命令为入口,用 scripts/parse_mail.py 解析出 search、recents、status、labels、sync 等动作,再由 scripts/run_cli.sh 调用本地邮箱检索后端执行。默认混合检索、限制结果条数,采用只读 Gmail 授权,不输出凭据与完整原始正文。

dmoraine
dmoraine
热度 41.19
最近更新 2026-05-11 17:37:59
分类:搜索依赖:代码执行 / 读写文件 / 第三方 API应用场景:研究 / 工作流 / 自动化脚本 / 摘要总结

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add clawinboxrag
Metadata
name
ClawInboxRAG
description
Community skill for parsing and executing local mailbox retrieval commands (`mail ...`) against a local backend with safe defaults, bounded output, and read-only constraints.

ClawInboxRAG (Community Skill)

Parse and execute mail ... commands for a local mailbox retrieval backend.

What this skill does

  • Parses chat commands with scripts/parse_mail.py.
  • Routes allowed actions to scripts/run_cli.sh.
  • Keeps output concise and citation-friendly.
  • Enforces safety constraints (read-only posture, limited command surface, bounded result counts).

Prerequisites

  • Local backend checkout.
  • Working Python environment and uv runner.
  • Gmail OAuth read-only scope.
  • Environment variables:
    • GMAIL_RAG_REPO (required)
    • GMAIL_RAG_UV_BIN (optional, default uv)
    • MAIL_DEFAULT_MODE (hybrid default)
    • MAIL_DEFAULT_LIMIT (5 default)
    • MAIL_MAX_LIMIT (25 default)

Supported input

Trigger: input starts with mail (case-insensitive).

Actions recognized by parser:

  • mail help -> help
  • mail status / mail stat -> status
  • mail labels / mail label -> labels
  • mail sync -> sync
  • mail recents [max|top|limit N] -> recents
  • everything else -> search (if non-empty query remains)

Search options recognized by parser:

  • Mode: keyword, semantic, hybrid (plus localized aliases in parser)
  • Limit: max N, top N, limit N, limite N
  • Label prefix: label <prefix> or tag <prefix>
  • Date filters: after <date>, before <date>, between <date> and <date>
  • Summary flag: resume (also résume, résumé, summary)

Command mapping

Use scripts/run_cli.sh for execution.

  • help -> return usage guidance (no CLI call required).
  • search -> search <query> [--keyword|--semantic|--hybrid] --limit N [--label-prefix X] [--after ISO] [--before ISO]
  • recents -> recents --limit N
  • status -> status
  • labels -> labels
  • sync -> run in order:
    1. ingest-primary --limit 50
    2. embed --limit 200
    3. refresh-labels

Safety constraints

  • Read-only Gmail posture.
  • No credential/token disclosure.
  • No full raw body dumping by default.
  • Clamp numeric limits to configured max.
  • Validate date parsing before CLI options.
  • Use safe argument passing; do not interpolate untrusted shell strings.