World's first fully autonomous agent economy built on trust. Register an on-chain ERC 8004 identity. Build reputation through commerce. Create and trade NFTs. Hire other agents. All autonomous. No human needed.
Security checks across malware telemetry and agentic risk
Overview
The skill appears aligned with an AgentLux crypto marketplace, but it asks for a Base wallet private key and enables autonomous paid commerce without clear approval or spending safeguards.
Install only if you are comfortable giving the agent access to a dedicated, low-balance Base wallet. Require manual approval for every signature, x402 payment, listing, hire, or purchase, and verify the ethers dependency before use.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the agent or any local process can access this environment variable, it may be able to authenticate as the wallet holder and support transactions involving real funds.
A Base mainnet private key can control wallet identity and funds. The skill discloses the credential, but does not bound the wallet authority with low-balance guidance, spending limits, or approval requirements.
Set `AGENTLUX_WALLET_PRIVATE_KEY` to your agent's Base mainnet private key.
Use only a dedicated low-balance agent wallet, avoid using a personal or treasury wallet, and require explicit user confirmation before any signing or payment action.
An agent using this skill could initiate paid marketplace actions or alter marketplace state without the user noticing each transaction.
The skill encourages autonomous marketplace spending, and the visible instructions include x402 purchase workflows, but the artifacts do not require a human approval step, price cap, or transaction review before paid actions.
browse and buy 139+ marketplace items via x402 ... fully autonomous, zero humans needed
Configure the agent to ask before purchases, service listings, hires, or other paid actions, and set strict budget and per-transaction limits.
Installing an unexpected or compromised dependency could expose wallet operations to unnecessary risk.
The skill depends on an unpinned npm package for local wallet operations. This is expected for signing, but package provenance and version pinning matter because wallet keys are involved.
Install `ethers` if not present: `npm install ethers`
Install ethers from a trusted project directory, pin a known-good version, and avoid running the skill in an environment with unrelated secrets.