Nadmail

• Analyzed: May 12, 2026, 3:39 AM
• Findings: 1
• Version: 2.0.0
• Hash: ebd624f7fb22b41d824072ca95c6a906042662b00eb295fbf914daa1f46fd777
• Source: palm
• External report: View on VirusTotal

Findings (1)

The NadMail skill is classified as benign due to its strong security posture and clear alignment with its stated purpose. It implements robust safeguards, including mandatory AES-256-GCM encryption for private keys, strict path validation for wallet files (preventing traversal and limiting size), interactive confirmation and daily caps for financial transactions (`emo-buy`), and secure handling of sensitive data (mnemonics displayed once, audit logs masking sensitive information). The `SKILL.md` explicitly details security guidelines and a changelog highlighting past security hardening efforts. All external communications are directed to the legitimate `nadmail.ai` API or the Monad blockchain, and there is no evidence of data exfiltration, unauthorized execution, or prompt injection attempts.