Open Wallet

Use https://tx.steer.fun to have a user execute a wallet action (send a transaction or sign a message) with their own wallet via a shareable URL. Use when an agent needs the user to approve/execute a JSON-RPC request (e.g. eth_sendTransaction, personal_sign, eth_signTypedData_v4, wallet_sendCalls) and return the result (tx hash/signature) back to the agent, optionally via redirect_url.

This skill is coherent and does what it says (builds tx.steer.fun links), but it still involves user signatures/transactions so treat it cautiously. Before using: (1) verify the domain (https://tx.steer.fun) is the intended service and trust it; (2) always present the request in plain language to the user (what contract, function, chain, and value) and get explicit consent before asking them to open the link; (3) be careful with redirect_url/template mode — it can send signatures or transaction hashes to third-party endpoints or embed them in messages (avoid sending sensitive results to unknown destinations); (4) prefer manual copy/paste when privacy is required or use a redirect_url under your control; (5) consider adding agent-side checks to display the full JSON-RPC payload and warn about transactions that transfer funds or grant approvals. If you need provenance or higher assurance, ask the skill author for a homepage/source and verify the service independently.

Type: OpenClaw Skill Name: open-wallet Version: 1.0.4 The skill bundle is classified as benign. The `SKILL.md` provides clear instructions for an AI agent to generate URLs for users to execute Web3 wallet actions via `https://tx.steer.fun`. There is no evidence of prompt injection against the agent, data exfiltration beyond the intended return of transaction results, or instructions for malicious execution, persistence, or obfuscation. The documentation even includes explicit 'Safety Checks' instructing the agent to show the user what the request does in plain language and prefer least-privilege requests.