Wallet Safety Checkup

A practical security review skill that checks wallet and backup habits for obvious weak points. Use when the user wants to audit their crypto security setup....

This skill is suspicious because its code tries to read a hard-coded path in a user's home directory (/Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md), which is unrelated to the described self-report wallet audit. Before installing or enabling it, ask the publisher why the handler needs to read that path (and why it's hard-coded to a specific home). Prefer a version that: (1) does not perform any filesystem reads, or (2) reads only its own packaged SKILL.md via a relative path or bundled resource, and (3) documents exactly what data it accesses. If you must run it, run it in a constrained/sandboxed environment and do not give it access to sensitive files. If you cannot get a clear explanation, avoid installing or enabling the skill.

Type: OpenClaw Skill Name: wallet-safety-checkup Version: 1.0.0 The skill contains a hardcoded absolute file path in handler.py (/Users/jianghaidong/.openclaw/skills/) used for file operations, which is a security risk (potential path traversal or information disclosure) and indicates the code is not designed for portable or secure execution. While the SKILL.md instructions describe a benign crypto security audit based on self-reporting, the combination of sensitive subject matter and poor path handling practices is concerning.