Security audit
Agent Wallet
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed wallet-control bridge with high-impact financial tools, but the reviewed package behavior is coherent with that purpose and the scans are clean.
Install only if you intend to let OpenClaw operate crypto wallets. Review the configured local Python runtime, keep signing keys out of plain config, use encrypted wallet storage, and be especially careful before enabling autonomous permissions because they allow some EVM swap and DeFi actions until revoked.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.