Xaman Wallet Integration

Integrate Xaman wallet SDK to authenticate users, connect wallets, request XRP payments, and manage sessions on the XRP Ledger.

This SKILL.md otherwise looks like a normal browser-side Xumm/Xaman wallet integration, but there are three points to check before installing: (1) Metadata mismatch — the skill metadata declares no env vars but the instructions require NEXT_PUBLIC_XAMAN_API_KEY; ask the publisher to correct metadata so you know what secrets/config are needed. (2) Trust the CDN — the runtime instructs you to load code from https://xumm.app; verify that domain and the SDK file are legitimate and consider pinning a known-good release or hosting the SDK yourself if you need higher supply-chain assurance. (3) Session storage and API key exposure — NEXT_PUBLIC_ indicates the key will be public in client builds and the SDK persists JWTs in localStorage by default (accessible to other scripts and vulnerable to XSS). If you need stronger security, use server-side flows, avoid storing long-lived tokens in localStorage, or configure the SDK to use more secure storage. If you cannot validate the skill author/source (homepage/source are missing), request provenance before installing.

Type: OpenClaw Skill Name: xaman-wallet-integration Version: 1.0.0 The skill bundle provides instructions and code snippets for integrating the Xaman wallet (formerly Xumm) for XRP Ledger authentication and transactions. It instructs loading an SDK from the official `https://xumm.app` CDN, which is a legitimate source for the stated purpose. All content in `SKILL.md` is purely instructional and descriptive, focusing on the wallet integration process. There are no signs of prompt injection attempts against the AI agent, no malicious code, no data exfiltration, nor any unauthorized actions or external communications beyond the legitimate Xaman service.