Openclaw Agentpmt Tool Blockchain Scanner D789e7

• Risk level: Low
• Analyzed: Feb 18, 2026, 7:04 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's stated purpose (a blockchain scanner via AgentPMT) matches its instructions, but those instructions ask the agent/user to create or use EVM wallets, produce wallet signatures, and make on‑chain payments — sensitive actions that are under-specified and could be abused.

This skill will ask the agent (and potentially you) to create/use an EVM wallet, sign messages, and buy credits on AgentPMT. Before using it: (1) Do not paste your private key into chat — only sign with a wallet you control (browser extension or hardware wallet). (2) Prefer using a disposable/test wallet with minimal funds for initial use. (3) Ask the skill author how the POST /agentaddress endpoint handles key generation and custody — does it ever return private keys or keep them server-side? (4) When prompted to sign, inspect the exact message/transaction being signed; refuse to sign raw transactions that authorize token transfers or approvals you do not intend. (5) Verify the domain (https://www.agentpmt.com) independently and confirm pricing and refund policies before making payments. If these questions are not answered clearly, avoid using the skill or limit use to a throwaway wallet.