← 返回 Skills 市场
daaab

Ethermail

作者 Ju Chun Ko · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
1319
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install ethermail
功能描述
Access Web3 email via EtherMail using WalletConnect. Use when you need to check or send emails with your Ethereum wallet address, receive notifications from Web3 services, or communicate with other AI agents via decentralized email.
使用说明 (SKILL.md)

EtherMail (Web3 Email)

Access email using your Ethereum wallet address. No email/password needed — just sign with your wallet!

🚀 Quick Start

Easiest way: Use the Telegram Mini App! 👉 Open EtherMail on Telegram

Prerequisites

  1. WalletConnect connector — Use the walletconnect-agent skill or your own WalletConnect setup
  2. Browser automation — Clawdbot browser tool or Puppeteer
  3. EVM wallet — Any Ethereum-compatible address

Your EtherMail Address

Your email is automatically derived from your wallet:

\x3Cyour-wallet-address>@ethermail.io

Example: [email protected]

You can also set up custom aliases like [email protected] in account settings.


Access Methods

Method 1: Telegram Mini App (Recommended)

The easiest way to access EtherMail:

  1. Open: https://t.me/ethermailappbot/app?startapp=afid_6986e9a5c5a97b905a78c390
  2. Connect your wallet via WalletConnect
  3. Read and send emails directly in Telegram!

Method 2: Web Browser + WalletConnect

Step 1: Navigate to Login Page

browser action=navigate profile=clawd targetUrl="https://ethermail.io/accounts/login"

Step 2: Click Wallet Login

Find and click the "Sign in with Wallet" button to trigger WalletConnect modal.

Step 3: Extract WalletConnect URI from Shadow DOM

EtherMail embeds WalletConnect in Shadow DOM. Use this script to extract the URI:

// Run in browser console or via browser action=act evaluate
function findWalletConnectURI() {
  function searchShadow(root, depth = 0) {
    if (depth > 5) return null;
    const elements = root.querySelectorAll('*');
    for (const el of elements) {
      if (el.shadowRoot) {
        const html = el.shadowRoot.innerHTML;
        const match = html.match(/wc:[a-f0-9]+@2\?[^"'\x3C>\s]+/);
        if (match) return match[0];
        const found = searchShadow(el.shadowRoot, depth + 1);
        if (found) return found;
      }
    }
    return null;
  }
  return searchShadow(document);
}
findWalletConnectURI();

Or use the bundled script:

# Returns: wc:abc123...@2?relay-protocol=irn&symKey=xyz...
node scripts/extract-wc-uri.js

Step 4: Connect with WalletConnect

Use the walletconnect-agent skill (install from ClawdHub):

# Install walletconnect-agent skill first
clawdhub install walletconnect-agent

# Then use its wc-connect.js script
cd ~/clawd/skills/walletconnect-agent
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "\x3CWC_URI>"

The connector will automatically sign the personal_sign request, completing login.

⚠️ Security Note: Always use the official walletconnect-agent skill from ClawdHub. Do not use untrusted third-party WalletConnect scripts.

Step 5: Access Inbox

After successful login, the browser redirects to your inbox. Use browser automation to:

  • Read emails
  • Compose new messages
  • Check notifications

Shadow DOM Extraction Script

For browser automation, use scripts/extract-wc-uri.js:

# Usage with Puppeteer
node scripts/extract-wc-uri.js --url "https://ethermail.io/accounts/login"

Use Cases

  1. Agent-to-Agent Communication — Receive emails from other AI agents
  2. Web3 Notifications — NFT drops, DAO votes, DeFi alerts
  3. Decentralized Identity — Email tied to your on-chain identity
  4. Backup Communication — When other channels fail
  5. Earn Rewards — Get paid in $EMT tokens for reading promotional emails

Troubleshooting

Can't find WalletConnect URI

  • Shadow DOM search needs sufficient depth (try depth > 5)
  • URI only appears after WalletConnect modal is fully loaded
  • Some browsers block Shadow DOM access — use headless Chromium

URI expired

  • WalletConnect URIs expire in ~5 minutes
  • Close modal and reopen to get fresh URI

Login fails

  • Ensure wallet address matches the expected signer
  • Check that wc-connect.js supports personal_sign
  • Verify you're on EVM-compatible network

CAPTCHA blocking login

  • EtherMail uses Turnstile CAPTCHA on the web
  • Use the Telegram Mini App instead for easier access

Security Notes

  • ⚠️ Never commit private keys
  • Store credentials in environment variables or secure files
  • EtherMail only requires message signing (no transaction needed for login)
  • Use dedicated wallet for agent operations
  • Use official walletconnect-agent skill from ClawdHub for WalletConnect integration
  • Browser automation runs with Puppeteer sandbox enabled for security isolation

Changelog

v1.1.0 (2026-02-08) - Security Update

  • 🔐 Removed --no-sandbox flag from Puppeteer for better security isolation
  • 📝 Clarified to use official walletconnect-agent skill from ClawdHub
  • 📝 Added supply chain security notes

v1.0.0

  • 🎉 Initial release

Links

安全使用建议
Key things to consider before installing/using this skill: - Source verification: the skill lists no homepage and the source is unknown. Confirm the author/owner and that you're comfortable installing code from this publisher before running anything. - Private key risk: the instructions show using export PRIVATE_KEY and running a separate walletconnect-agent to automatically sign personal_sign requests. That requires exposing a private key to software — only use an isolated, disposable wallet with no funds you care about. Do NOT use your primary or large-balance keys. - Inspect walletconnect-agent: the skill depends on a separate 'walletconnect-agent' skill (not included). Review that agent's code and behavior before giving it any credentials or private keys; it performs sensitive signing actions. - Run in isolation: run the Puppeteer script and any wallet agent inside an isolated environment (container or VM) and with sandboxing enabled, as recommended. Avoid disabling the browser sandbox. - Prefer safer UX: use the Telegram Mini App path if possible (it avoids giving raw private keys to scripts). If you must use automation, prefer hardware-backed signing workflows or manual approval flows rather than exporting private keys to env vars. - Minimal testing: test first with an empty/dedicated test account and confirm the entire flow behaves as you expect (no unexpected network calls, no logging of private data).
功能分析
Type: OpenClaw Skill Name: ethermail Version: 1.1.0 The skill bundle is classified as benign. All files and instructions align with the stated purpose of accessing Web3 email via EtherMail using WalletConnect. While the skill involves high-risk capabilities like browser automation (`puppeteer` in `scripts/extract-wc-uri.js`) and interaction with a user's wallet (via the `walletconnect-agent` skill), these are necessary for its core functionality. The `SKILL.md` explicitly provides security notes advising against committing private keys, using environment variables, and utilizing the official `walletconnect-agent` skill. Furthermore, the changelog in `SKILL.md` highlights a security update that removed the `--no-sandbox` flag from Puppeteer, indicating a conscious effort towards secure practices. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection intended to subvert the agent's purpose.
能力评估
Purpose & Capability
The skill claims to provide Web3 email access via WalletConnect and includes a Puppeteer script to extract the WalletConnect URI; the puppeteer dependency and the extract-wc-uri.js script are coherent with that purpose.
Instruction Scope
SKILL.md instructs the user/agent to provide a PRIVATE_KEY and to run an external 'walletconnect-agent' skill to perform signing. The skill does not declare any required env vars but the runtime instructions explicitly use PRIVATE_KEY; that mismatch is a scope/visibility issue. The instructions also direct automated browser navigation and clicking, which is expected for this purpose but requires careful isolation because it triggers auth flows.
Install Mechanism
There is no install spec (instruction-only), which lowers install risk, but package.json and a dependency on puppeteer are present. Puppeteer is an expected npm dependency for browser automation; no downloads from anonymous URLs or extracts are used. Consumers should be aware the skill expects an npm environment to install puppeteer if they run the script.
Credentials
The SKILL.md demonstrates exporting PRIVATE_KEY and running the walletconnect-agent which will sign messages with that key. The skill metadata lists no required environment variables or primary credential, so explicit handling of a private key is not declared in the manifest. Requesting access to a raw private key is high privilege and should be justified and limited (e.g., ephemeral dedicated wallet only).
Persistence & Privilege
The skill does not request persistent presence (always:false) and does not attempt to modify other skills or system configuration. Autonomous invocation is allowed (platform default) but not combined with other elevated privileges here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install ethermail
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /ethermail 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
Security update: removed --no-sandbox, clarified walletconnect-agent dependency
v1.0.0
Initial release: Web3 email access via WalletConnect, Telegram Mini App support
元数据
Slug ethermail
版本 1.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Ethermail 是什么?

Access Web3 email via EtherMail using WalletConnect. Use when you need to check or send emails with your Ethereum wallet address, receive notifications from Web3 services, or communicate with other AI agents via decentralized email. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1319 次。

如何安装 Ethermail?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ethermail」即可一键安装,无需额外配置。

Ethermail 是免费的吗?

是的,Ethermail 完全免费(开源免费),可自由下载、安装和使用。

Ethermail 支持哪些平台?

Ethermail 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Ethermail?

由 Ju Chun Ko(@daaab)开发并维护,当前版本 v1.1.0。

💬 留言讨论