WalletPilot 7715

Execute on-chain transactions with user-granted permissions. Built on MetaMask ERC-7715. No private keys, full guardrails.

Do not install or give this skill access to secrets until you verify the vendor and the SDK. Steps to reduce risk: - Confirm the project identity: visit walletpilot.xyz, inspect the GitHub repo (https://github.com/andreolf/walletpilot) and verify the npm package @walletpilot/sdk source code and recent commits. Ensure the repo and website match and appear legitimate. - Require the maintainer to declare the required secret(s) in the registry (primaryEnv) so you can manage them via your agent's secrets store rather than placing keys in plain environment variables. - Audit the SDK code (or a trusted third party) to confirm it does not accept private keys or expose other sensitive flows, and check what the apiKey authorizes server-side. - Limit permissions before granting them: use minimal spend limits, restrict chains and contract allowlists, and set short expiry periods. Test on a testnet or with a tiny amount first. - Ensure the agent prompts you for every non-trivial transaction (explicit human confirmation) rather than auto-executing trades simply because state.connected is true. - If you must proceed, store the API key in a secrets manager, do not place it in general environment variables, and monitor all WalletPilot-related activity (permission list, tx history, and revocations). If you cannot confirm the provider and audit the SDK, treat this skill as high-risk for financial loss and avoid giving it credentials or wide permissions.

Type: OpenClaw Skill Name: walletpilot-7715 Version: 0.1.0 The skill bundle is classified as benign. It provides functionality for an AI agent to execute on-chain cryptocurrency transactions through MetaMask's ERC-7715 standard. While this involves high-risk financial operations, the documentation in SKILL.md consistently emphasizes user-granted, scoped permissions, guardrails (spend limits, chain restrictions, expiry), and the absence of private key handling by the agent. There is no evidence of intentional harmful behavior, such as data exfiltration, malicious execution, persistence mechanisms, or prompt injection instructions designed to bypass user consent or perform unauthorized actions. The external API calls to `walletpilot.xyz` and `api.1inch.io` are consistent with the stated purpose of a DeFi agent.