Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add DongLiStudio/personal-agent-foundation --skill mail-profilegit clone --depth 1 https://github.com/DongLiStudio/personal-agent-foundationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/donglistudio/personal-agent-foundation/mail-profile)<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/mail-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/mail-profile/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/mail-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/mail-profile.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00096 | $0.00763 |
| Opus 5.5 | $0.00038 | $0.00305 |
| Sonnet 5.5 | $0.00019 | $0.00153 |
| Haiku 4.5 | $0.00010 | $0.00076 |
Grade A, and why
mail-profile scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
多租户邮箱 Profile 管理
核心边界
- 先读取
GLOBAL/MAIL_PROFILES.md与当前项目身份规则，再解析唯一邮箱 Profile。用户当前明确指定优先，其次为项目条件化路由、项目默认和 GLOBAL 默认。 - 实际邮箱地址、所属主体和服务商必须通过实时回读确认。网页或客户端当前登录、系统默认账号和历史缓存目录都不是业务路由依据。
- 默认只读：搜索、读取和下载附件不得改变已读状态、文件夹、标签或邮件内容。发送、回复、转发、删除、移动及规则修改必须另行取得明确授权并使用对应邮件 Skill。
- 不在 Skill、GLOBAL、项目、Git、聊天或普通命令参数中保存密码、授权码、OAuth token、恢复码、Cookie 或解密后的凭据。
- 认证成功不扩大业务权限；不得跨公司、客户或个人主体混搜。项目写入仍使用项目自己的业务 Skill 和身份规则。
Provider 路由
- 飞书邮箱：使用现有
lark-mail，显式指定对应飞书--profile与--as user；先回读primary_email_address。 - Gmail 或其他已安装邮箱连接器：使用服务商 OAuth，并核验连接所代表的实际地址；连接器状态不写入 GLOBAL。
- 163、QQ、Outlook或其他通用 IMAP：读取 references/generic-imap.md，使用本 Skill 的只读脚本和本机安全凭据注入，不使用明文配置。
- 发票与账单归集：读取 references/invoice-collection.md。
- 项目路由和放置规则：读取 references/project-routing.md。
生命周期
- 读取
MAIL_PROFILES.md与项目规则，确定目标主体和逻辑名称。 - 新增前实时核对已有 Profile，禁止覆盖同名或借用其他主体。
- 按 Provider 完成授权；仅申请当前任务需要的最小读取权限。
- 回读真实邮箱地址并执行不改变状态的最小搜索。
- 用户确认非敏感路由后，登记
MAIL_PROFILES.md；凭据留在服务商或本机安全存储。 - 换机时只迁移非敏感路由，重新授权；本机密文不复制。
- 删除时先列出项目引用和影响，取得明确确认后再移除授权和路由。
写后验证
- 报告逻辑 Profile、真实邮箱地址、所属主体、Provider、身份验证结果和只读搜索结果。
- 下载附件时报告邮件标识、原始文件名、哈希和保存路径；不输出邮件中的凭据或无关个人信息。
- 任何项目写入都必须回读目标记录并验证实际项目身份；邮箱查到附件不等于已完成记账、报销或OA。
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago First seen · 39 lines · 96 tokens per session scan A 170b1c6c104a
mail-profile is a skill published in the GitHub repository DongLiStudio/personal-agent-foundation (16 stars, last pushed yesterday), licensed Apache-2.0. It adds 96 tokens to every session and 763 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-01.
Other skills, from other repositories
a0-development
Develop or operate Agent Zero: projects, chats, tasks, framework, tools and API/WebUI.
local-project-context
The local task workspace, the build/test commands the hand-off gate runs, and the file and exploration tools. Use when starting work in a task workspace or before running any build, test or verification command.
brainstorming
Socratic questioning protocol + user communication.
convex-agents
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration.
himalaya
Read, search, and organize emails via the himalaya CLI (IMAP/SMTP). Use when the user asks to check email, search messages, list folders, download attachments, or manage email flags and folders.
cron
Create and manage scheduled tasks that run automatically — periodic literature checks, data collection, report generation, and recurring notifications. Use when the user wants to schedule, list, pause, resume, or delete cron jobs via researchclaw cron.