agentmail — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentmail (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when you need to:
This is NOT for reading the user's personal email (use himalaya or Gmail for that). AgentMail gives the agent its own identity and inbox.
am_)Add to ~/.zorro/config.yaml (paste your actual key — MCP env vars are not expanded from .env):
mcp_servers:
agentmail:
command: "npx"
args: ["-y", "agentmail-mcp"]
env:
AGENTMAIL_API_KEY: "am_your_key_here"zorroAll 11 AgentMail tools are now available automatically.
| Tool | Description |
|---|---|
list_inboxes | List all agent inboxes |
get_inbox | Get details of a specific inbox |
create_inbox | Create a new inbox (gets a real email address) |
delete_inbox | Delete an inbox |
list_threads | List email threads in an inbox |
get_thread | Get a specific email thread |
send_message | Send a new email |
reply_to_message | Reply to an existing email |
forward_message | Forward an email |
update_message | Update message labels/status |
get_attachment | Download an email attachment |
create_inbox with a username (e.g. zorro-agent)[email protected]send_message with inbox_id, to, subject, textlist_threads to see incoming conversationsget_thread to read a specific threadlist_inboxes to find your inbox IDlist_threads with the inbox ID to see conversationsget_thread to read a thread and its messagesget_threadreply_to_message with the message ID and your reply textSign up for a service:
1. create_inbox (username: "signup-bot")
2. Use the inbox address to register on the service
3. list_threads to check for verification email
4. get_thread to read the verification codeAgent-to-human outreach:
1. create_inbox (username: "zorro-outreach")
2. send_message (to: [email protected], subject: "Hello", text: "...")
3. list_threads to check for replies@agentmail.to domain on free tier (custom domains on paid plans)npx -y agentmail-mcp)mcp Python package must be installed: pip install mcplist_threads polling via cronjob instead for personal useAfter setup, test with:
zorro --toolsets mcp -q "Create an AgentMail inbox called test-agent and tell me its email address"You should see the new inbox address returned.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.