Warden App

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill can guide high-impact crypto wallet actions, but its artifacts disclose that purpose and require explicit user approval before execution.

Install only if you want an agent to help operate Warden through your browser. Verify the official Warden URL, keep seed phrases/private keys out of the session, and require a clear transaction summary plus your explicit approval before any swap, withdrawal, deposit, or trade.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, the agent could help initiate irreversible or risky crypto transactions.

Why it was flagged

The skill authorizes browser-driven actions that can move funds or create trading exposure. This is high-impact, but it is the core stated purpose and is paired with explicit confirmation requirements.

Skill content
Supported action patterns:
- Swap token A → token B
- Deposit/withdraw to/from a protocol
- Open/close perp position
Recommendation

Use only for trusted Warden sessions, review every transaction summary carefully, and require explicit approval before any final signing or confirmation.

What this means

The agent may see wallet balances, positions, and transaction prompts in the logged-in browser session.

Why it was flagged

The skill depends on an authenticated Warden session and wallet authority. That is expected for wallet automation, but it gives the agent access to sensitive account and transaction context.

Skill content
User is logged into the Warden App... Wallet connection method is clear:
- embedded Warden wallet, or
- external wallet (e.g., MetaMask/Rabby/etc.).
Recommendation

Do not expose seed phrases or private keys, keep wallet prompts user-reviewed, and limit use to the intended Warden account and network.

What this means

Future wallet automation could rely on outdated or incorrect UI notes.

Why it was flagged

The skill stores reusable workflow notes that future agents may consult. This is purpose-aligned, but persistent notes can become stale or misleading if updated incorrectly.

Skill content
Record the minimal set of repeatable workflows (URLs + UI landmarks) in `references/warden-ui-notes.md`.
Recommendation

Keep the reference file limited to non-sensitive UI landmarks, verify URLs and transaction details at runtime, and avoid storing account-specific private information.