Security audit

Agent Wallet

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed wallet-operation plugin that grants high-impact financial tools, but its behavior is coherent with its stated purpose and includes preview/confirmation guidance.

Install only if you intend to let OpenClaw operate a real wallet. Review the configured backend, runtime path, RPC/provider keys, encrypted wallet storage, and autonomous approval setting before use; keep autonomous permissions disabled or revoked unless you deliberately want broad wallet-write authority.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/index.js:380
Evidence: const stdout = execFileSync(

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.ts:380
Evidence: const stdout = execFileSync(