ethermail
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The EtherMail purpose is plausible, but the skill’s core login path depends on installing a separate third-party skill and handing it a raw Ethereum private key. That transitive dependency and credential forwarding are disproportionate to the stated purpose and create a high-risk supply-chain/credential-theft scenario, even though the EtherMail and WalletConnect concepts themselves are legitimate.
Confidence: 92%Severity: 90%
Audit Metadata