Back to skill
Skillv1.0.9

VirusTotal security

moltmail-ethermail · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 5:18 AM
Hash
b0a942eb5d1200efab78757177ca2e477b2e2b7e19d137e9f2c0d660df0a97df
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: moltmail-ethermail Version: 1.0.9 The moltmail-ethermail skill provides a legitimate interface for Web3-based email services via the EtherMail platform. It handles sensitive EVM private keys by prompting the user during setup, encrypting them locally using AES-256-GCM with scrypt-derived keys, and storing them with restricted file permissions (0600) in the `state/` directory. The skill only transmits cryptographic signatures to the official API (srv.ethermail.io) for authentication, following standard security practices for non-custodial wallet integrations. The instructions in SKILL.md are well-aligned with the stated functionality and do not contain malicious prompt-injection attempts.
External report
View on VirusTotal