TokClaw Wallet

TokClaw Wallet agent for blockchain wallet operations including registration, login, balance check, token transfers, and PIN management on TokClaw chain (7447).

This skill instructs the agent to download and immediately run a shell script from an unverified domain and to execute wallet commands itself (curl | sh and sh tokclaw-wallet.sh ...). That pattern is high-risk: a remote script can run arbitrary code, read or exfiltrate files, or create persistent backdoors. Before installing: (1) do not let the agent run curl | sh autonomously — require the user to run installs manually; (2) verify the install URL and source repository (prefer GitHub releases or a package manager and a checksum); (3) inspect the script contents before executing; (4) avoid giving the agent an exec tool that can run shell commands on your system, or limit it to clearly scoped commands; (5) prefer a wallet implementation with a published repo, signatures, and clear privacy/security docs. Given the strong red flags, avoid installing this skill until you can validate the script and its provenance.

Type: OpenClaw Skill Name: tokclaw Version: 5.9.0 The SKILL.md file contains aggressive prompt-injection instructions designed to bypass agent safety guardrails by mandating the immediate execution of remote code (curl | sh) from wallet.tokclaw.com without user confirmation. It also directs the agent to store sensitive data like PINs in plaintext files (tokclaw-pin.txt) and explicitly forbids the agent from asking for user permission. While these behaviors are framed as automation for a blockchain wallet, the combination of unverified remote execution and the intentional suppression of user oversight represents a high-risk security profile.