Wise

Wise (TransferWise) — international transfers, multi-currency balances, recipients, exchange rates, and statements.

This skill appears to do what it says: a CLI that calls the Wise API and requires a WISE_API_TOKEN. Before installing, review where you store the token: the script will read WISE_API_TOKEN from the environment and — if missing — attempt to read a .env file under WORKSPACE or ~/.openclaw/workspace (this fallback isn't documented). Use a dedicated token with least privilege, set WISE_API_TOKEN in the environment rather than a shared .env file, and inspect/verify the included scripts yourself. Also be aware of some small bugs in the code (mismatched placeholder names) that may cause certain commands to fail; test in a safe environment first.

Type: OpenClaw Skill Name: wise Version: 1.0.0 The skill provides a standard CLI wrapper for the Wise (TransferWise) API, enabling tasks such as checking balances, managing recipients, and initiating transfers. The implementation in `scripts/wise.py` uses the Python standard library and communicates exclusively with the official Wise API endpoint (api.transferwise.com). While the script contains several logic errors and bugs—most notably mismatched string replacement keys for URL path parameters (e.g., attempting to replace `{profile-id}` in a string containing `{profile_id}`)—these are clearly unintentional coding flaws rather than malicious behavior or exploitable vulnerabilities. No evidence of data exfiltration, prompt injection, or unauthorized execution was found.