Walletconnect Requester

• Analyzed: May 14, 2026, 5:52 AM
• Findings: 1
• Version: 1.0.2
• Hash: 03a4c9889571c88851e475826806bc33866cc597b00387e7331a44816fa1811b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The walletconnect-requester skill is a non-custodial Web3 integration tool designed to allow AI agents to request transactions and signatures that must be manually approved by a user via WalletConnect v2. The implementation in scripts/wc-requester.js correctly follows the WalletConnect DApp (Proposer) workflow, ensuring private keys never enter the agent's environment. It uses standard libraries (@walletconnect/sign-client), maintains local session persistence and audit logs in a dedicated home directory folder (~/.walletconnect-requester/), and contains no evidence of data exfiltration, malicious execution, or prompt-injection attacks.