Agent Wallet

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.7
• Hash: 389a1c2ef61d1893d5363a2d045abf2bbfb8b83412b696e755607710a6f404b1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to allow an AI agent to manage an EVM wallet without ever exposing private keys to the agent. All transactions are handled server-side via an API (`safeskill-production.up.railway.app`) and are subject to user-defined policies. The `SKILL.md` explicitly instructs the agent 'Never try to access raw secret values' and clearly outlines all API interactions, including powerful ones like `send-transaction`, which are mitigated by the policy system. There is no evidence of prompt injection attempts, data exfiltration to unauthorized endpoints, or other malicious behaviors; the skill's design prioritizes security and user control.