Plan Spending Controls for Agent Wallets
Autonomous agents need spending limits and clear approval rules before handling funds. This public guide outlines wallet controls for planning, but does not include implementation files.
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Review the Skillstore skill "openclaw-agent-wallet" from https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet.md and its manifest at https://skillstore.io/api/skills/nexaiguy-openclaw-agent-wallet/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Usando "openclaw-agent-wallet". Propose a $50 daily cap and require approval above $10.
Resultado esperado:
Usando "openclaw-agent-wallet". Can this folder enforce wallet limits without other components?
Resultado esperado:
Usando "openclaw-agent-wallet". Does WALLET_SIGNER_URL mean the signer is air-gapped?
Resultado esperado:
No. A signer URL identifies an external service. It does not prove offline isolation, authenticated access, or enforced spending controls.
All ten static detections are false positives involving Markdown, attribution links, or protective discussion of private keys. The guide mischaracterizes URL-based external signing as air-gapped, without demonstrating offline isolation. No evidence found of executable payloads, credential collection, exfiltration, or prompt injection in the reviewed file.
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nexaiguy-openclaw-agent-wallet/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/nexaiguy-openclaw-agent-wallet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>nexaiguy. (2026). openclaw-agent-wallet security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet/audits/1@techreport{nexaiguy-nexaiguy-openclaw-agent-wallet-2026,
author = {nexaiguy},
title = {openclaw-agent-wallet security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet/audits/1},
note = {Author version 1.2}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "openclaw-agent-wallet security audit report (audit version 1)"
version: "1.2"
type: report
authors:
- name: "nexaiguy"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/nexaiguy-openclaw-agent-wallet/audits/1"
identifiers:
- type: other
value: "skillstore:nexaiguy-openclaw-agent-wallet:audit:1"
description: "Skillstore immutable audit report identifier"
Draft daily budgets and approval thresholds before integrating an agent with a separately implemented wallet service.
Identify signer isolation assumptions and distinguish documented controls from protections that require implementation evidence.
Plan which payments require human review and which events should appear in the payment audit trail.
Summarize the documented wallet controls and identify which implementation files are absent. Do not claim that any controls are active.
Draft a plain-language policy with a $50 daily cap and approval above $10. Mark it as a proposal, not an installed configuration.
Outline approval and audit requirements for high-value payments using this guide. Identify limitations of local queues and single-currency policies.
Review the external signer claims. Explain why a signer URL does not prove air-gapped isolation. List implementation evidence needed before using real funds.
Autor
nexaiguyLicencia
MIT
Versión del autor
v1.2
Revisión de Skillstore
r1
Aviso de versión
La versión declarada por el autor no es un SemVer válido.
Ref.
3ddfdca559084abffbfdd188f2ba14b597dcfd9c
Actualidad del mantenimiento
2/11/2026
Uso
0 descargas · 0 vistas
Estructura de archivos
📄 SKILL.md
Review Secret Scanning and Credential Remediation
Leaked credentials can remain accessible in repository history after deletion. This guide explains scanning workflows, credential rotation, and preventive hooks, but includes no executable scanner.
Prepare AI Prototypes for Production
AI-generated prototypes can lack secret management, monitoring, and recovery plans. This guide helps an AI agent organize hardening work for single-instance web applications.
Review Flemish Agricultural Lease Agreements
Agricultural lease files can contain classification, pricing, and sale risks that require careful review. This guide structures preliminary checks, missing-document lists, and client questions under the Flemish Agricultural Lease Decree.
Draft Belgian Construction Safety Documents
Belgian construction projects require structured safety documentation and clear follow-up records. This guide helps AI assistants draft those documents for review by a recognized safety coordinator.
Draft US Construction Pay Applications
Construction billing requires consistent progress totals, retainage calculations, and jurisdiction-specific documents. This guide helps AI assistants draft billing structures and identify review requirements.
Create Single-File HTML Hero Sections
Simple placeholder pages often require unnecessary project setup. This guide helps an AI agent draft a single HTML hero section without build tools or external dependencies.
Gestionar controles de billetera de agentes
por internet-court
Los agentes de IA pueden mover fondos sin límites operativos claros. Esta habilidad documenta una billetera local con firma controlada por políticas, límites de gasto y controles administrativos.
Generar recibos de contexto seguros para la privacidad
por caioribeiroclw-pixel
Los flujos de trabajo de agentes con mucho contexto pueden ocultar qué datos cruzaron los límites de herramientas, memoria y subagentes. Esta skill guía la creación de recibos concisos que demuestran el enrutamiento, la privacidad y las brechas de auditoría restantes.
Requerir aprobación por pares para comandos de agente riesgosos
por Dicklesworthstone
Los agentes de codificación de IA pueden ejecutar comandos destructivos demasiado rápido en proyectos compartidos. SLB añade una puerta de revisión por pares antes de que se ejecuten acciones de shell de alto riesgo.
Draft and Schedule Social Posts with TimeToPost
por melmayssonowen
Managing platform-specific posts requires consistent wording, account selection, and approval. This skill guides TimeToPost MCP drafting, timing recommendations, and scheduling after explicit user approval.
Planificar Operaciones Auditables de Campañas de Correo Electrónico
por Sequenzy
El trabajo con campañas de correo electrónico puede ocultar acciones riesgosas del proveedor y suposiciones poco claras. Esta habilidad convierte auditorías, migraciones y planes de ejecución en manuales operativos inspeccionables con puntos de aprobación.
Configura Claude Code hooks de forma segura
por 0xDarkMatter
Los Claude Code hooks son potentes, pero los scripts de hooks inseguros pueden filtrar datos o bloquear el trabajo de forma inesperada. Esta skill explica los eventos de hooks, los patrones de configuración y plantillas de scripts más seguras para una automatización controlada.