Privy Agentic Wallets

Create and manage agentic wallets with Privy. Use for autonomous onchain transactions, wallet creation, policy management, and transaction execution on Ethereum, Solana, and other chains. Triggers on requests involving crypto wallets for AI agents, server-side wallet operations, or autonomous transaction execution.

This skill appears to actually implement a Privy server-wallet workflow and therefore legitimately needs your PRIVY_APP_ID and PRIVY_APP_SECRET — but the published skill metadata did not declare those sensitive requirements or the config/log file paths the instructions reference. Before installing or enabling: 1) Confirm the platform will provide PRIVY_APP_SECRET to the skill securely (and will not leak it to other skills or responses). 2) Prefer creating a Privy App with minimal privileges and funding (use testnet or tiny amounts first), and plan to rotate the secret after testing. 3) Verify where credentials will be stored (the SKILL.md references ~/.openclaw/openclaw.json) and ensure the file permissions are secure. 4) Ask whether the agent will be allowed to write logs to ~/.openclaw/workspace/logs/ — if so, inspect those logs and their retention policies. 5) Keep autonomous invocation off (or tightly controlled) unless you fully trust the agent and have rate limits/confirmations enforced. 6) Require explicit verbal/user confirmations for policy/rule deletions and other destructive actions. If the publisher can explain the metadata omissions (and you can limit the Privy app's power and test on testnet), the skill can be used safely; without that, treat it cautiously.

Type: OpenClaw Skill Name: privy Version: 1.0.1 This skill is designed for high-risk operations involving real cryptocurrency funds, but it includes extensive and explicit security instructions for the AI agent to prevent misuse and prompt injection. Key indicators include mandatory policies with spending limits, detailed pre-transaction validation checklists, explicit instructions to protect API credentials (PRIVY_APP_SECRET), a comprehensive list of forbidden actions, and strong defenses against prompt injection patterns, all detailed across SKILL.md, references/security.md, and references/policies.md. The skill's intent is clearly to provide a secure framework for agentic wallets, not to exploit or exfiltrate data.