Nadmail

NadMail - Email for AI Agents on Monad. Register [email protected], send emails that micro-invest in meme coins, boost with emo-buy. SIWE auth, no CAPTCHA,...

This skill will ask for and use a blockchain/private‑key credential and will write files under ~/.nadmail; that is consistent with an email service that makes on‑chain micro‑purchases, but you should not give it your main/private keys or large balances. Before installing: 1) Verify the API domain (api.nadmail.ai) independently and confirm it’s the real service; 2) Prefer managed mode with a throwaway wallet or use an environment variable containing a key that has minimal funds; 3) Do not export your primary wallet private key into NADMAIL_PRIVATE_KEY; create a separate wallet and fund it with a small test amount; 4) Be cautious about sending MON to the deposit address in the README — confirm that address via the official service first; 5) Note the metadata inconsistency (metadata claims no required env vars and version mismatches) — ask the publisher to correct registry metadata and provide provenance (homepage, source control) before trusting widely.

Type: OpenClaw Skill Name: nadmail Version: 2.0.0 The NadMail skill is classified as benign due to its strong security posture and clear alignment with its stated purpose. It implements robust safeguards, including mandatory AES-256-GCM encryption for private keys, strict path validation for wallet files (preventing traversal and limiting size), interactive confirmation and daily caps for financial transactions (`emo-buy`), and secure handling of sensitive data (mnemonics displayed once, audit logs masking sensitive information). The `SKILL.md` explicitly details security guidelines and a changelog highlighting past security hardening efforts. All external communications are directed to the legitimate `nadmail.ai` API or the Monad blockchain, and there is no evidence of data exfiltration, unauthorized execution, or prompt injection attempts.