W3connect

Access ETH wallet address and securely send ETH or USDC on Ethereum or Base chains with 2FA authentication code verification.

This skill expects a local wallet/signing service listening on http://127.0.0.1:5333 (web3b0x or similar). If you do not have that service running, the calls will fail. If you do run such a service, the agent will be able to call it and submit real transactions when given a valid 2FA code — only provide one-time codes when you intend to authorize a transfer. Ask the skill author for the service's expected binary/software and documentation (there's no homepage or source listed). Note the small inconsistency in SKILL.md metadata claiming python/pip are required; confirm whether any local components or installs are necessary before use. Finally, treat this as powerful: verify the local service code and network exposure (ensure it truly binds to localhost and is from a trusted source) before allowing the agent to perform payments.

Type: OpenClaw Skill Name: w3connect Version: 0.3.0 The skill provides capabilities to interact with a local web3 service (http://127.0.0.1:5333) to get wallet addresses and initiate financial transactions (sending ETH/USDC) as seen in GET_ADDRESS.md, PAY_TO_EMAIL.md, and SEND.md. While these operations require an authenticator code, the inherent high-risk nature of fund transfers and the reliance on an unverified local service make this skill suspicious. There is no direct evidence of malicious intent like data exfiltration or backdoor installation within the skill bundle itself, but the capabilities could be misused if the agent is compromised or the local service has vulnerabilities.