Skip to main content
inkbox Send and receive emails and phone calls via Inkbox agent identities. Use when the user wants to check inbox messages, list unread email, view a thread, search mailbox contents, draft/send an email, place an outbound phone call, list call history, retrieve call transcripts, manage vault credentials, or create/set up an Inkbox identity.
설치로 이동 Skills Marketplace 커뮤니티가 만든 AI 스킬을 발견하고 탐색하세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/LeoYeAI/openclaw-master-skills --skill inkbox명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Zip 다운로드 다운로드 중... 이 저장소의 다른 Skills A curated collection of 2409+ best OpenClaw skills — AI tools, productivity, marketing, frontend, mobile, backend, DevOps and more. Weekly updated by MyClaw.ai — Powered by MyClaw.ai
ai-image-to-video-generator The ai-image-to-video-generator skill on ClawHub transforms static images into dynamic, motion-rich video content through a conversational interface. Upload any photo or illustration, describe the motion style you want, and receive a polished video output. Ideal for marketers, content creators, and social media managers who need animated visuals without complex software. Supports mp4, mov, avi, webm, and mkv output formats.
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.
name inkbox description Send and receive emails and phone calls via Inkbox agent identities. Use when the user wants to check inbox messages, list unread email, view a thread, search mailbox contents, draft/send an email, place an outbound phone call, list call history, retrieve call transcripts, manage vault credentials, or create/set up an Inkbox identity. metadata {"openclaw":{"emoji":"📬","homepage":"https://inkbox.ai","requires":{"env":["INKBOX_API_KEY"],"bins":["node"]},"primaryEnv":"INKBOX_API_KEY"}}
Inkbox Skill
API-first communication infrastructure for AI agents — email, phone, encrypted vault, and identities.
Requirements
INKBOX_API_KEY — Inkbox API keynode on PATH (Node.js 18+)INKBOX_AGENT_HANDLE is optional; use it when already configured, otherwise ask the user which identity handle to use or create
Runtime setup
Do not assume @inkbox/sdk is already installed in the skill folder.
When the SDK is missing, prefer a temporary disposable Node directory over modifying the workspace or skill folder. Use a flow like:
Create a temporary directory
Run npm init -y
Run npm install @inkbox/sdk
Write a small .mjs script there
Run it with node
Only install dependencies into the skill folder or workspace if the user explicitly asks.
Use .mjs scripts with standard ESM imports. Avoid relying on
tsx --eval
Install & Init Requires Node.js ≥ 18. ESM module — no context manager needed:
import { Inkbox } from "@inkbox/sdk" ;
const inkbox = new Inkbox ({ apiKey : process.env .INKBOX_API_KEY });
Constructor options: { apiKey: string, baseUrl?: string, timeoutMs?: number }
Core Model Inkbox (org-level client)
├── .createIdentity(handle) → Promise<AgentIdentity>
├── .getIdentity(handle) → Promise<AgentIdentity>
├── .listIdentities() → Promise<AgentIdentitySummary[]>
├── .mailboxes → MailboxesResource
├── .phoneNumbers → PhoneNumbersResource
├── .vault → VaultResource
└── .createSigningKey() → Promise<SigningKey>
AgentIdentity (identity-scoped helper)
├── .mailbox → IdentityMailbox | null
├── .phoneNumber → IdentityPhoneNumber | null
├── .getCredentials() → Promise<Credentials> (requires vault unlocked)
├── mail methods (requires assigned mailbox)
└── phone methods (requires assigned phone number)
An identity must have a channel assigned before you can use mail/phone methods. If not assigned, an InkboxAPIError is thrown.
Identities const identity = await inkbox.createIdentity ("sales-agent" );
const identity = await inkbox.getIdentity ("sales-agent" );
const identities = await inkbox.listIdentities ();
await identity.update ({ newHandle : "new-name" });
await identity.update ({ status : "paused" });
await identity.refresh ();
await identity.delete ();
If INKBOX_AGENT_HANDLE is not configured, ask the user for the handle to use.
After creating a new identity:
show the handle and mailbox address to the user
ask whether they want to save the handle in skills.entries.<skill>.env.INKBOX_AGENT_HANDLE
do not store the API key in plaintext config; prefer skills.entries.<skill>.apiKey with a SecretRef to INKBOX_API_KEY
Channel Management
const mailbox = await identity.createMailbox ({ displayName : "Sales Agent" });
const phone = await identity.provisionPhoneNumber ({ type : "toll_free" });
console .log (mailbox.emailAddress );
console .log (phone.number );
await identity.assignMailbox ("mailbox-uuid" );
await identity.assignPhoneNumber ("phone-number-uuid" );
await identity.unlinkMailbox ();
await identity.unlinkPhoneNumber ();
Mail
Send Before sending, confirm recipients, subject, and body with the user.
const sent = await identity.sendEmail ({
to : ["user@example.com" ],
subject : "Hello" ,
bodyText : "Hi there!" ,
bodyHtml : "<p>Hi there!</p>" ,
cc : ["cc@example.com" ],
bcc : ["bcc@example.com" ],
inReplyToMessageId : sent.id ,
attachments : [{
filename : "report.pdf" ,
contentType : "application/pdf" ,
contentBase64 : "<base64>" ,
}],
});
Read
for await (const msg of identity.iterEmails ()) {
console .log (msg.subject , msg.fromAddress , msg.isRead );
}
for await (const msg of identity.iterEmails ({ direction : "inbound" })) {
...
}
for await (const msg of identity.iterUnreadEmails ()) {
...
}
const ids = [];
for await (const msg of identity.iterUnreadEmails ()) ids.push (msg.id );
await identity.markEmailsRead (ids);
const thread = await identity.getThread (msg.threadId );
for (const m of thread.messages ) {
console .log (`[${m.fromAddress} ] ${m.subject} ` );
}
Search
const results = await inkbox.mailboxes .search (identity.mailbox .emailAddress , {
q : "invoice" ,
limit : 20 ,
});
This operation requires the identity to already have a mailbox provisioned.
Phone
const call = await identity.placeCall ({
toNumber : "+15167251294" ,
clientWebsocketUrl : "wss://your-agent.example.com/ws" ,
});
console .log (call.status );
console .log (call.rateLimit .callsRemaining );
const calls = await identity.listCalls ({ limit : 10 , offset : 0 });
for (const c of calls) {
console .log (c.id , c.direction , c.remotePhoneNumber , c.status );
}
const segments = await identity.listTranscripts (calls[0 ].id );
for (const t of segments) {
console .log (`[${t.party} ] ${t.text} ` );
}
Always confirm before placing a call.
Vault Encrypted credential vault with client-side Argon2id key derivation and AES-256-GCM encryption. The server never sees plaintext secrets. Requires hash-wasm (included as a dependency).
Unlock & Read import type { LoginPayload , APIKeyPayload , SSHKeyPayload , OtherPayload } from "@inkbox/sdk" ;
const unlocked = await inkbox.vault .unlock ("my-Vault-key-01!" );
const unlocked = await inkbox.vault .unlock ("my-Vault-key-01!" , { identityId : "agent-uuid" });
for (const secret of unlocked.secrets ) {
console .log (secret.name , secret.secretType );
console .log (secret.payload );
}
const secret = await unlocked.getSecret ("secret-uuid" );
const login = secret.payload as LoginPayload ;
console .log (login.username , login.password );
Create & Update
await unlocked.createSecret ({
name : "AWS Production" ,
description : "Production IAM user" ,
payload : { password : "s3cret" , username : "admin" , url : "https://aws.amazon.com" },
});
await unlocked.createSecret ({
name : "GitHub PAT" ,
payload : { apiKey : "ghp_xxx" },
});
await unlocked.createSecret ({
name : "Deploy Key" ,
payload : { privateKey : "-----BEGIN OPENSSH PRIVATE KEY-----..." },
});
await unlocked.createSecret ({
name : "Misc" ,
payload : { data : "any freeform content" },
});
await unlocked.updateSecret ("secret-uuid" , { name : "New Name" });
await unlocked.updateSecret ("secret-uuid" , {
payload : { password : "new" , username : "new" },
});
await unlocked.deleteSecret ("secret-uuid" );
Metadata (no unlock needed) const info = await inkbox.vault .info ();
const keys = await inkbox.vault .listKeys ();
const keys = await inkbox.vault .listKeys ({ keyType : "recovery" });
const secrets = await inkbox.vault .listSecrets ();
const secrets = await inkbox.vault .listSecrets ({ secretType : "login" });
await inkbox.vault .deleteSecret ("secret-uuid" );
Payload Types Type Interface Fields loginLoginPayloadpassword, username?, email?, url?, notes?, totp?api_keyAPIKeyPayloadapiKey, endpoint?, notes?key_pairKeyPairPayloadaccessKey, secretKey, endpoint?, notes?ssh_keySSHKeyPayloadprivateKey, publicKey?, fingerprint?, passphrase?, notes?otherOtherPayloaddata
secretType is immutable after creation. To change it, delete and recreate.
Agent Credentials (identity-scoped) Agent-facing credential access — typed, identity-scoped. The vault stays as the admin surface; identity.getCredentials() is the agent runtime surface.
import type { Credentials } from "@inkbox/sdk" ;
await inkbox.vault .unlock ("my-Vault-key-01!" );
const identity = await inkbox.getIdentity ("support-bot" );
const creds = await identity.getCredentials ();
const allCreds = creds.list ();
const logins = creds.listLogins ();
const apiKeys = creds.listApiKeys ();
const sshKeys = creds.listSshKeys ();
const login = creds.getLogin ("secret-uuid" );
const apiKey = creds.getApiKey ("secret-uuid" );
const sshKey = creds.getSshKey ("secret-uuid" );
const secret = creds.get ("secret-uuid" );
Requires inkbox.vault.unlock() first — throws InkboxAPIError if vault is not unlocked
Results are filtered to secrets the identity has access to (via access rules)
Cached after first call; call identity.refresh() to clear the cache
get* throws Error if not found, TypeError if wrong secret type
One-Time Passwords (TOTP) TOTP secrets are stored inside LoginPayload.totp in the encrypted vault. Codes are generated client-side — no server call needed.
From an agent identity (recommended) import { parseTotpUri } from "@inkbox/sdk" ;
import type { LoginPayload } from "@inkbox/sdk" ;
const secret = await identity.createSecret ({
name : "GitHub" ,
payload : {
username : "user@example.com" ,
password : "s3cret" ,
totp : parseTotpUri ("otpauth://totp/GitHub:user@example.com?secret=JBSWY3DPEHPK3PXP&issuer=GitHub" ),
} satisfies LoginPayload ,
});
const code = await identity.getTotpCode (secret.id );
console .log (code.code );
console .log (code.secondsRemaining );
await identity.setTotp (secretId, "otpauth://totp/...?secret=..." );
await identity.removeTotp (secretId);
From the unlocked vault (org-level) const unlocked = await inkbox.vault .unlock ("my-Vault-key-01!" );
await unlocked.setTotp (secretId, totpConfigOrUri);
await unlocked.removeTotp (secretId);
const code = await unlocked.getTotpCode (secretId);
TOTPCode fields Field Type Description codestringThe OTP code (e.g. "482901") periodStartnumberUnix timestamp when the code became valid periodEndnumberUnix timestamp when the code expires secondsRemainingnumberSeconds until expiry
Org-level Resources
Mailboxes (inkbox.mailboxes) const mailboxes = await inkbox.mailboxes .list ();
const mailbox = await inkbox.mailboxes .get ("abc@inkboxmail.com" );
const mb = await inkbox.mailboxes .create ({ agentHandle : "support" , displayName : "Support Inbox" });
await inkbox.mailboxes .update (mb.emailAddress , { displayName : "New Name" });
await inkbox.mailboxes .update (mb.emailAddress , { webhookUrl : "https://example.com/hook" });
await inkbox.mailboxes .update (mb.emailAddress , { webhookUrl : null });
const results = await inkbox.mailboxes .search (mb.emailAddress , { q : "invoice" , limit : 20 });
await inkbox.mailboxes .delete (mb.emailAddress );
Phone Numbers (inkbox.phoneNumbers) const numbers = await inkbox.phoneNumbers .list ();
const number = await inkbox.phoneNumbers .get ("phone-number-uuid" );
const num = await inkbox.phoneNumbers .provision ({ agentHandle : "my-agent" , type : "toll_free" });
const local = await inkbox.phoneNumbers .provision ({ agentHandle : "my-agent" , type : "local" , state : "NY" });
await inkbox.phoneNumbers .update (num.id , {
incomingCallAction : "webhook" ,
incomingCallWebhookUrl : "https://..." ,
});
await inkbox.phoneNumbers .update (num.id , {
incomingCallAction : "auto_accept" ,
clientWebsocketUrl : "wss://..." ,
});
const hits = await inkbox.phoneNumbers .searchTranscripts (num.id , { q : "refund" , party : "remote" , limit : 50 });
await inkbox.phoneNumbers .release (num.id );
Webhooks & Signature Verification Webhooks are configured directly on the mailbox or phone number — no separate registration.
import { verifyWebhook } from "@inkbox/sdk" ;
const key = await inkbox.createSigningKey ();
const valid = verifyWebhook ({
payload : req.body ,
headers : req.headers as Record <string, string>,
secret : "whsec_..." ,
});
Headers checked: x-inkbox-signature, x-inkbox-request-id, x-inkbox-timestamp.
Algorithm: HMAC-SHA256 over "{requestId}.{timestamp}.{body}".
Error Handling import { InkboxAPIError } from "@inkbox/sdk" ;
try {
const identity = await inkbox.getIdentity ("unknown" );
} catch (e) {
if (e instanceof InkboxAPIError ) {
console .log (e.statusCode );
console .log (e.detail );
}
}
If Inkbox returns 401 Unauthorized, tell the user the API key was rejected and ask them to verify or rotate INKBOX_API_KEY
If INKBOX_AGENT_HANDLE is missing, ask the user which identity to use or create one first
If an operation needs mailbox or phone provisioning that does not yet exist, explain what is missing and stop before guessing
Key Conventions
All method and property names are camelCase
iterEmails() / iterUnreadEmails() return AsyncGenerator<Message> — use for await...oflistCalls() returns Promise<PhoneCall[]> — offset pagination, not a generatorTo clear a nullable field (e.g. webhook URL), pass field: null
No context manager needed — new Inkbox({...}) is all that's required
All methods are async and return Promises — always await them
Confirm before sending emails or placing calls
Thread IDs come from message objects (threadId)
Message IDs can be used for inReplyToMessageId
Phone numbers must be in E.164 format (for example +15551234567)
The identity must have a phone number assigned for phone operations
Call IDs from listCalls can be passed to listTranscripts
