MetaMask Smart Accounts KIt

Web3 development using MetaMask Smart Accounts Kit. Use when the user wants to build dApps with ERC-4337 smart accounts, send user operations, batch transactions, configure signers (EOA, passkey, multisig), implement gas abstraction with paymasters, create delegations, or request advanced permissions (ERC-7715). Supports Viem integration, multiple signer types (Dynamic, Web3Auth, Wagmi), gasless transactions, and the Delegation Framework.

This is a developer reference for MetaMask Smart Accounts and appears internally consistent, but take these practical precautions before using it: - Verify you install the official package and version from the npm registry (check package name, publisher, and ideally a checksum) rather than copying arbitrary code. - Never paste or commit real private keys shown in examples; use environment-secured keys, hardware wallets, or ephemeral/test keys on testnets for development. - ERC-7715 advanced permissions can grant ongoing authority to move tokens; only request/approve permissions from MetaMask for trusted dapps and prefer tight caveats/restrictions. Test on a testnet first. - Only use trusted bundler/paymaster RPC endpoints; those endpoints will see user operations and could act on them — run your own or use well-known providers. - Because the registry metadata lacks a homepage/source, confirm the skill's source and the upstream package (MetaMask docs and the @metamask package) before running install commands. If you want, I can list specific places in the SKILL.md that you should sanitize or adapt before copying into your project (private-key examples, placeholder RPC URLs, permission requests).

Type: OpenClaw Skill Name: smart-accounts-kit Version: 1.0.6 The skill bundle provides comprehensive documentation and code examples for the MetaMask Smart Accounts Kit. All installation commands reference legitimate `@metamask` and `metamask/delegation-framework` packages. While `SKILL.md` mentions `process.env.SESSION_KEY` for session accounts, this is a standard practice for automated Web3 agents to manage ephemeral keys locally for delegated actions, with no evidence of exfiltration. The markdown content is instructional and lacks any prompt injection attempts or other malicious indicators.