Skills agent-wallet
๐Ÿ“ฆ

agent-wallet

Content revision r1 Medium Risk โš™๏ธ External commands๐ŸŒ Network access๐Ÿ“ Filesystem access

Manage Agent Wallet Controls

AI agents can move funds without clear operational boundaries. This skill documents a local wallet with policy-gated signing, spend caps, and admin controls.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "agent-wallet" from https://skillstore.io/skills/internet-court-agent-wallet.md and its manifest at https://skillstore.io/api/skills/internet-court-agent-wallet/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "agent-wallet". Check whether the wallet is ready to use on Base.

Expected outcome:

The response summarizes address availability, kill-switch state, policy digest, Base balance, and whether policy allows activity.

Using "agent-wallet". Why was my transaction refused?

Expected outcome:

  • The response names the exact policy rule that refused the transaction.
  • It recommends admin policy review instead of trying to bypass the rule.

Using "agent-wallet". Open the local dashboard.

Expected outcome:

The response starts the localhost dashboard and directs the admin to use the one-time token from tool output.

Security Audit

Medium Risk
v2 โ€ข 7/21/2026 Open versioned report

Static detections are documentation and Markdown false positives; the file does not contain executable shell, network, or secret-exfiltration behavior. Two design risks remain: policy allowlists are permissive when omitted, and the local dashboard token is printed in tool output. Review the implementation separately before funding a wallet.

1
Files scanned
248
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
Permissive policy fields when unset
The policy reference states that unset allowedChains and allowedToAddresses permit any chain or address. An administrator who disables the kill switch without setting these controls can unintentionally authorize broad transfers.
The documented behavior explicitly defines permissive defaults for the relevant allowlists, creating a clear configuration-risk path.
Medium
Dashboard admin token exposed in tool output
The dashboard token is printed in tool output, which can place a policy-management credential in the agent conversation. Localhost binding limits exposure, but the token should remain outside model-visible output.
The documentation explicitly says the token is printed in tool output; the resulting exposure is mitigated, but not eliminated, by the localhost-only endpoint.
Audited by: claude View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/internet-court-agent-wallet/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/internet-court-agent-wallet/security.svg)](https://skillstore.io/skills/internet-court-agent-wallet?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/internet-court-agent-wallet?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-agent-wallet/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/internet-court-agent-wallet.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

internet-court. (2026). agent-wallet security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-agent-wallet/audits/2

BibTeX citation

@techreport{internet-court-internet-court-agent-wallet-2026, author = {internet-court}, title = {agent-wallet security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/internet-court-agent-wallet/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "agent-wallet security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "internet-court" date-released: "2026-07-21" url: "https://skillstore.io/skills/internet-court-agent-wallet/audits/2" identifiers: - type: other value: "skillstore:internet-court-agent-wallet:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Constrain DeFi Agent Spend

Set wallet policies that limit chains, destinations, transaction value, gas, daily spend, and memo requirements.

Inspect Agent Wallet State

Review the agent wallet address, balances, policy digest, and kill-switch status before approving activity.

Manage Local Policy Changes

Use the documented localhost dashboard to review policy settings, toggle the kill switch, and recover from bad edits.

Try These Prompts

Show Wallet Status
Check the agent wallet status and explain the address, active policy digest, and kill-switch state before any transaction.
Review Policy Limits
Read the active agent wallet policy and summarize allowed chains, allowed destinations, spend caps, gas caps, selector blocks, and memo requirements.
Prepare a Policy-Gated Transaction
Before signing, verify the target chain, destination, value, gas limit, data selector, daily spend window, and required memo against policy.
Audit Wallet Operating Model
Assess this agent wallet setup for policy bypass paths, key backup risks, dashboard exposure, unsupported features, and operational controls.

Best Practices

  • Start with the kill switch enabled until an admin reviews every policy limit.
  • Fund the wallet with small balances that match the policy caps and intended task.
  • Keep passphrases and dashboard tokens outside prompts, chat logs, and shared notes.

Avoid

  • Do not ask the agent to work around a policy refusal.
  • Do not store wallet passphrases in prompts, shared notes, or command histories.
  • Do not expose the dashboard beyond localhost or leave it running unattended.

Frequently Asked Questions

Does this skill custody funds?
No. The document describes custody on the user machine through local keystore files.
Can the agent change its policy?
The skill says MCP tools cannot write the policy. The local dashboard can edit it after admin authentication.
Can it move real crypto assets?
Yes. The signing flow can broadcast transactions that move funds when policy permits.
Is Solana supported?
The document contains conflicting statements. Treat Solana support as unverified until the author reconciles the documentation.
What happens if the passphrase is lost?
The keystore cannot be recovered without the passphrase. Users must keep an offline backup.
Is it suitable for automatic installation?
No. It handles wallet keys, local files, a dashboard, and transactions, so it needs explicit review.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

3f6e026a3363e0954ede7bef0cfe88d4475de137

Maintenance freshness

7/22/2026

Usage

1 downloads ยท 0 views

File structure

๐Ÿ“„ SKILL.md

More from internet-court

View all
View all