← Back to Skills Marketplace
306
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install walletconnect-requester
Description
Secure WalletConnect integration for AI agents. Connect to user wallets as a DApp (Proposer) without ever handling private keys. Request transactions and sig...
Usage Guidance
This skill appears to do what it says: it implements a non‑custodial WalletConnect requester that never handles private keys and asks users to approve all actions. Before installing: (1) Verify WC_PROJECT_ID is obtained from WalletConnect Cloud and do not provide any private keys. (2) Review the included scripts/wc-requester.js yourself (or run in an isolated environment) and confirm the npm dependencies are acceptable—npm packages carry normal supply‑chain risk. (3) Use a dedicated wallet for agent interactions and review ~/.walletconnect-requester/audit.log and sessions.json regularly. (4) Note the registry metadata shows malformed env listing ([object Object])—confirm the actual required env is WC_PROJECT_ID as documented in SKILL.md.
Capability Analysis
Type: OpenClaw Skill
Name: walletconnect-requester
Version: 1.0.2
The walletconnect-requester skill is a non-custodial Web3 integration tool designed to allow AI agents to request transactions and signatures that must be manually approved by a user via WalletConnect v2. The implementation in scripts/wc-requester.js correctly follows the WalletConnect DApp (Proposer) workflow, ensuring private keys never enter the agent's environment. It uses standard libraries (@walletconnect/sign-client), maintains local session persistence and audit logs in a dedicated home directory folder (~/.walletconnect-requester/), and contains no evidence of data exfiltration, malicious execution, or prompt-injection attacks.
Capability Assessment
Purpose & Capability
The name/description (non‑custodial WalletConnect requester) matches the code and SKILL.md: the script implements a WalletConnect v2 proposer that requests transactions/signatures but does not access private keys. The only required secret is WC_PROJECT_ID. Note: registry metadata displayed as '[object Object]' for required env vars appears malformed, but SKILL.md clearly lists WC_PROJECT_ID and optional WC_METADATA_* variables.
Instruction Scope
SKILL.md directs the agent/user to set WC_PROJECT_ID, install standard WalletConnect Node libraries, run the included Node script, and interact via QR/URI. The instructions and the script's behavior (connect, request-tx, request-sign, sessions, disconnect) stay within the described purpose. The script persists session and audit files under ~/.walletconnect-requester as documented.
Install Mechanism
There is no packaged install spec; the SKILL.md instructs running npm install for three public npm packages (@walletconnect/* and qrcode). This is expected for a Node tool but carries normal npm supply-chain risk; the included code is also shipped with the skill (scripts/wc-requester.js), so no remote arbitrary-download install URLs are used.
Credentials
Only WC_PROJECT_ID (required) and optional metadata env vars are declared and used. No unrelated credentials, keys, or system tokens are requested. The script reads HOME to create ~/.walletconnect-requester, which is proportional to session persistence.
Persistence & Privilege
The skill persists sessions.json and audit.log under ~/.walletconnect-requester and will write files there; always:false (not force-included). This is reasonable for session management, but users should be aware session tokens are sensitive and audit logs, while masked, are persisted locally.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install walletconnect-requester - After installation, invoke the skill by name or use
/walletconnect-requester - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
**1.0.2 changelog:**
- Added `metadata` section documenting required/optional environment variables, data persistence, and security notes.
- Security and privacy guidance improved, including file sensitivity levels, handling of WalletConnect URI and session tokens, and recommendations for file permissions.
- Clarified local data storage: `sessions.json` for session state, `audit.log` for transaction history (with masked sensitive data).
- No breaking changes to code or functionality; documentation now explicitly outlines storage location, audit practices, and handling of sensitive information.
v1.0.1
### walletconnect-requester 1.0.1
- Added detailed installation steps including dependency installation and project ID setup.
- Improved and clarified the "Quick Start" section for better onboarding.
- No changes to code or features—documentation only.
v1.0.0
walletconnect-requester 1.0.0
- Initial release of a non-custodial WalletConnect v2 integration for AI agents.
- Allows connecting to user wallets as a dApp (proposer), requesting transactions and signatures with user approval in their wallet.
- Never handles or stores private keys; users stay fully in control at all times.
- CLI commands to create sessions, request transactions/signatures, manage sessions, and configure permissions.
- Designed for maximum security with complete audit logging and minimal permissions by default.
Metadata
Frequently Asked Questions
What is Walletconnect Requester?
Secure WalletConnect integration for AI agents. Connect to user wallets as a DApp (Proposer) without ever handling private keys. Request transactions and sig... It is an AI Agent Skill for Claude Code / OpenClaw, with 306 downloads so far.
How do I install Walletconnect Requester?
Run "/install walletconnect-requester" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Walletconnect Requester free?
Yes, Walletconnect Requester is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Walletconnect Requester support?
Walletconnect Requester is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Walletconnect Requester?
It is built and maintained by bevanding (@bevanding); the current version is v1.0.2.
More Skills