Vincent - Agent Wallet

Use this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction. Also supports raw signing and polymarket betting.

This skill appears to implement an agent-controlled wallet via a hosted API (heyvincent.ai). Before installing: (1) verify the publisher and service (no source/homepage provided here); (2) confirm you trust heyvincent.ai to custody private keys and to act on the agent's behalf; (3) insist that the registry metadata be updated to declare the required API key/primary credential so the platform can surface and protect it; (4) store any API keys securely (avoid world-readable locations) and prefer per-agent, least-privilege API keys and strict spending policies; (5) test with minimal funds and monitor transactions; (6) if you cannot validate the service or the publisher, do not provide real funds or long‑lived credentials.

Type: OpenClaw Skill Name: vincent Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities and potential prompt injection vectors, despite its stated benign purpose. The `SKILL.md` file instructs the agent to store and retrieve API keys from specific file system paths (`~/.openclaw/credentials/agentwallet/` or `agentwallet/`), indicating file system read/write access. More critically, it explicitly instructs the agent to accept a user-provided `relinkToken` and use it directly in an unauthenticated API call to `https://heyvincent.ai/api/secrets/relink` to obtain a new API key. This creates a direct prompt injection surface where user input is treated as a sensitive authorization token, allowing a malicious user to potentially trick the agent into misusing the recovery mechanism. The skill also involves high-risk financial transactions (transfers, swaps, betting) via API calls to `https://heyvincent.ai`.