MetaMask Agent Wallet

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 0.1.0
• Hash: 7cc91b12ef94b7aa6724db9dfd83e9517389fac5ed5e2e0e4f3ad6d192c77356
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for 'MetaMask Agent Wallet' appears benign. The `SKILL.md` clearly outlines the purpose of controlling a sandboxed MetaMask wallet with extensive security guardrails, including isolated browser profiles, separate wallets, configurable spend limits, protocol allowlists, and an explicit approval flow for high-value transactions. There is no evidence of prompt injection attempts against the agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The setup instructions involve standard `npm install` and `npx playwright install chromium` commands, which are typical for a Node.js project interacting with a browser, and do not inherently indicate malicious intent.