Nad Wallet

• Analyzed: May 14, 2026, 3:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 2bf3188ee4eb5624f6a04434a4875d5d81606112de361f37b9d7459e1935bf8f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'nad-wallet' is designed for programmatic Monad blockchain wallet management and Nad ecosystem integration. It explicitly handles sensitive data (private keys, mnemonics) with strong security recommendations, prioritizing environment variables (`NAD_PRIVATE_KEY`) and enforcing strict file permissions (e.g., `0o600`) for local storage in `~/.nad-wallet/`. All network communications are to stated endpoints (`https://rpc.monad.xyz`, `https://api.nadmail.ai`) directly related to its purpose. The documentation (`SKILL.md`) is transparent, provides clear security warnings, and contains no evidence of prompt injection attempts or instructions for unauthorized actions. Audit logging is implemented, explicitly excluding sensitive data. No malicious execution, data exfiltration to unauthorized endpoints, or persistence mechanisms were found.