Ethermail

Access Web3 email via EtherMail using WalletConnect. Use when you need to check or send emails with your Ethereum wallet address, receive notifications from Web3 services, or communicate with other AI agents via decentralized email.

Security Scan

The skill's code and instructions generally match its stated purpose (extract a WalletConnect URI and guide signing via a separate WalletConnect agent), but there are notable inconsistencies and sensitive operations (private-key signing) that are not fully declared or sourced, so proceed with caution.

Purpose & Capability

The skill claims to provide Web3 email access via WalletConnect and includes a Puppeteer script to extract the WalletConnect URI; the puppeteer dependency and the extract-wc-uri.js script are coherent with that purpose.

Instruction Scope

SKILL.md instructs the user/agent to provide a PRIVATE_KEY and to run an external 'walletconnect-agent' skill to perform signing. The skill does not declare any required env vars but the runtime instructions explicitly use PRIVATE_KEY; that mismatch is a scope/visibility issue. The instructions also direct automated browser navigation and clicking, which is expected for this purpose but requires careful isolation because it triggers auth flows.

Install Mechanism

There is no install spec (instruction-only), which lowers install risk, but package.json and a dependency on puppeteer are present. Puppeteer is an expected npm dependency for browser automation; no downloads from anonymous URLs or extracts are used. Consumers should be aware the skill expects an npm environment to install puppeteer if they run the script.

Credentials

The SKILL.md demonstrates exporting PRIVATE_KEY and running the walletconnect-agent which will sign messages with that key. The skill metadata lists no required environment variables or primary credential, so explicit handling of a private key is not declared in the manifest. Requesting access to a raw private key is high privilege and should be justified and limited (e.g., ephemeral dedicated wallet only).

Persistence & Privilege

The skill does not request persistent presence (always:false) and does not attempt to modify other skills or system configuration. Autonomous invocation is allowed (platform default) but not combined with other elevated privileges here.

What to consider before installing

Key things to consider before installing/using this skill: - Source verification: the skill lists no homepage and the source is unknown. Confirm the author/owner and that you're comfortable installing code from this publisher before running anything. - Private key risk: the instructions show using export PRIVATE_KEY and running a separate walletconnect-agent to automatically sign personal_sign requests. That requires exposing a private key to software — only use an isolated, disposable wallet with no funds you care about. Do NOT use your primary or large-balance keys. - Inspect walletconnect-agent: the skill depends on a separate 'walletconnect-agent' skill (not included). Review that agent's code and behavior before giving it any credentials or private keys; it performs sensitive signing actions. - Run in isolation: run the Puppeteer script and any wallet agent inside an isolated environment (container or VM) and with sandboxing enabled, as recommended. Avoid disabling the browser sandbox. - Prefer safer UX: use the Telegram Mini App path if possible (it avoids giving raw private keys to scripts). If you must use automation, prefer hardware-backed signing workflows or manual approval flows rather than exporting private keys to env vars. - Minimal testing: test first with an empty/dedicated test account and confirm the entire flow behaves as you expect (no unexpected network calls, no logging of private data).

EtherMail (Web3 Email)

Access email using your Ethereum wallet address. No email/password needed — just sign with your wallet!

🚀 Quick Start

Easiest way: Use the Telegram Mini App! 👉 Open EtherMail on Telegram

Prerequisites

1. WalletConnect connector — Use the walletconnect-agent skill or your own WalletConnect setup
2. Browser automation — Clawdbot browser tool or Puppeteer
3. EVM wallet — Any Ethereum-compatible address

Your EtherMail Address

Your email is automatically derived from your wallet:

<your-wallet-address>@ethermail.io

Example: [e-mail]

You can also set up custom aliases like [e-mail] in account settings.

---

Access Methods

Method 1: Telegram Mini App (Recommended)

The easiest way to access EtherMail:

1. Open: https://t.me/ethermailappbot/app?startapp=afid_6986e9a5c5a97b905a78c390
2. Connect your wallet via WalletConnect
3. Read and send emails directly in Telegram!

Method 2: Web Browser + WalletConnect

Step 1: Navigate to Login Page

browser action=navigate profile=clawd targetUrl="https://ethermail.io/accounts/login"

Step 2: Click Wallet Login

Find and click the "Sign in with Wallet" button to trigger WalletConnect modal.

Step 3: Extract WalletConnect URI from Shadow DOM

EtherMail embeds WalletConnect in Shadow DOM. Use this script to extract the URI:

// Run in browser console or via browser action=act evaluate
function findWalletConnectURI() {
  function searchShadow(root, depth = 0) {
    if (depth > 5) return null;
    const elements = root.querySelectorAll('*');
    for (const el of elements) {
      if (el.shadowRoot) {
        const html = el.shadowRoot.innerHTML;
        const match = html.match(/wc:[a-f0-9]+@2\?[^"'<>\s]+/);
        if (match) return match[0];
        const found = searchShadow(el.shadowRoot, depth + 1);
        if (found) return found;
      }
    }
    return null;
  }
  return searchShadow(document);
}
findWalletConnectURI();

Or use the bundled script:

# Returns: wc:abc123...@2?relay-protocol=irn&symKey=xyz...
node scripts/extract-wc-uri.js

Step 4: Connect with WalletConnect

Use the walletconnect-agent skill (install from ClawdHub):

# Install walletconnect-agent skill first
clawdhub install walletconnect-agent

# Then use its wc-connect.js script
cd ~/clawd/skills/walletconnect-agent
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "<WC_URI>"

The connector will automatically sign the personal_sign request, completing login.

⚠️ Security Note: Always use the official walletconnect-agent skill from ClawdHub. Do not use untrusted third-party WalletConnect scripts.

Step 5: Access Inbox

After successful login, the browser redirects to your inbox. Use browser automation to:

• Read emails
• Compose new messages
• Check notifications

---

Shadow DOM Extraction Script

For browser automation, use scripts/extract-wc-uri.js:

# Usage with Puppeteer
node scripts/extract-wc-uri.js --url "https://ethermail.io/accounts/login"

---

Use Cases

1. Agent-to-Agent Communication — Receive emails from other AI agents
2. Web3 Notifications — NFT drops, DAO votes, DeFi alerts
3. Decentralized Identity — Email tied to your on-chain identity
4. Backup Communication — When other channels fail
5. Earn Rewards — Get paid in $EMT tokens for reading promotional emails

---

Troubleshooting

Can't find WalletConnect URI

• Shadow DOM search needs sufficient depth (try depth > 5)
• URI only appears after WalletConnect modal is fully loaded
• Some browsers block Shadow DOM access — use headless Chromium

URI expired

• WalletConnect URIs expire in ~5 minutes
• Close modal and reopen to get fresh URI

Login fails

• Ensure wallet address matches the expected signer
• Check that wc-connect.js supports personal_sign
• Verify you're on EVM-compatible network

CAPTCHA blocking login

• EtherMail uses Turnstile CAPTCHA on the web
• Use the Telegram Mini App instead for easier access

---

Security Notes

• ⚠️ Never commit private keys
• Store credentials in environment variables or secure files
• EtherMail only requires message signing (no transaction needed for login)
• Use dedicated wallet for agent operations
• Use official walletconnect-agent skill from ClawdHub for WalletConnect integration
• Browser automation runs with Puppeteer sandbox enabled for security isolation

---

Changelog

v1.1.0 (2026-02-08) - Security Update

• 🔐 Removed --no-sandbox flag from Puppeteer for better security isolation
• 📝 Clarified to use official walletconnect-agent skill from ClawdHub
• 📝 Added supply chain security notes

v1.0.0

• 🎉 Initial release

---

Links

• Telegram App: https://t.me/ethermailappbot/app?startapp=afid_6986e9a5c5a97b905a78c390
• Website: https://ethermail.io
• Mobile App: Available on iOS and Android