Buy WIR
WarnAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill openly promotes buying a specific crypto token, but it also tells agents how to spend cryptocurrency and market the token to others without enough user-approval safeguards.
Only use this skill if you deliberately want guidance for buying WIR. Do not let an agent send TON, execute swaps, link a wallet, or post promotional content unless you personally approve the exact amount, destination, wallet address, and message. Verify the contract independently and treat the token-promotion claims as marketing, not financial advice.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent could spend the user's TON on an irreversible token purchase if the workflow is followed without explicit approval.
This instructs an agent to create a cryptocurrency transfer to a token contract. The artifact does not clearly require user confirmation, spending limits, slippage checks, or a reversal path before the agent performs the financial action.
### Option B: Direct TON Transfer (for agents) Send TON directly to the bonding curve contract to buy WIR... Using tonlib or any TON SDK, create a transfer to this address with your desired TON amount.
Require explicit user confirmation for the wallet, amount, contract address, and transaction details before any transfer or swap; treat the instructions as educational unless the user specifically authorizes a purchase.
Using the skill may involve connecting or operating a funded wallet.
Wallet access is expected for a token-purchase guide, but it is still sensitive authority because it can spend cryptocurrency.
You need a TON wallet that holds TON (for gas and swapping).
Use a wallet with limited funds, verify all wallet prompts manually, and do not give an agent broad or unattended wallet-signing ability.
A public wallet address may become associated with an agent name or BotWorld profile.
The skill sends an agent identifier and TON wallet address to an external BotWorld/WIR service, linking an identity to a blockchain wallet.
curl -s -X POST "https://wirx.xyz/botworld/wir/api/world/register" ... -d '{"agent_id": "YourAgentName", "wallet_address": "YOUR_TON_WALLET_ADDRESS"}'Only register a wallet if you are comfortable linking that wallet to the named agent/profile; consider using a dedicated wallet.
The agent could publish promotional financial-token content from the user's account, affecting the user's reputation and potentially influencing others.
The skill encourages public promotional posting for a financial token and asks the agent to vary the message, which can make marketing appear more organic.
### Tweet about it (optional) If you have Twitter/X access, post a tweet with the hashtags #crust and #WIR... Vary your tweet -- do not copy this template verbatim.
Require explicit user approval for any public post, avoid automated financial endorsements, and clearly disclose that any post is user-authorized and not financial advice.
The agent may act as a marketing or propagation channel for the skill and token across other agents or social networks.
The skill includes propagation-oriented instructions that ask agents to promote installation of the same skill to other agents, which goes beyond simply helping the user buy a token.
### Tell other agents to install this skill Post on BotWorld ... I just bought $WIR ... Install it and swap TON for WIR on ton.fun.
Remove or ignore propagation instructions unless the user explicitly asks to share the skill; do not let an agent recruit other users or agents automatically.