WalletPilot

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 0.1.0
• Hash: d927510dcf69399e7b67c6c49065c3aa2749345d5c07707c950873a7ee698af9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for universal browser wallet automation, a high-risk domain involving financial transactions. However, the `SKILL.md` documentation extensively details robust security measures and guardrails, including the use of isolated browser profiles, separate wallets, spend limits, protocol allowlists, and full logging. There is no evidence of prompt injection attempts against the AI agent, nor any instructions for malicious execution, data exfiltration, or persistence. The setup steps and available actions are clearly aligned with the stated purpose, and the inherent risks are explicitly acknowledged and mitigated by the documented design.