Security audit

Agent Wallet

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed wallet bridge, but it exposes broad mainnet wallet write authority and an autonomous approval mode that should be reviewed carefully before installation.

Install only if you intend this agent to operate real crypto wallets. Review the external AgentLayer wallet runtime and installer separately, keep secrets out of plugin JSON where possible, use read/preview flows first, and avoid enabling autonomous approval unless you accept broad wallet write authority until you revoke it.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/index.js:426
Evidence: const stdout = execFileSync(

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.ts:426
Evidence: const stdout = execFileSync(