Lost Wallet Lockdown
PassAudited by VirusTotal on May 13, 2026.
Overview
Type: OpenClaw Skill Name: lost-wallet-lockdown Version: 1.0.1 The 'lost-wallet-lockdown' skill is a prompt-only administrative tool designed to guide users through creating a recovery checklist. It contains no executable code, requires no API access, and includes strong safety boundaries in SKILL.md that explicitly forbid the agent from requesting sensitive data such as PINs, CVVs, or full SSNs. The workflow focuses on organizing information and directing users to official channels, with no evidence of malicious intent or prompt-injection risks.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The checklist may guide the user to freeze cards, report IDs, or contact access offices; mistakes could disrupt access or accounts, so the user must verify each action themselves.
The workflow covers high-impact identity and financial-account actions, but explicitly keeps all institutional action with the user and official channels.
This is a prompt-only administrative planning workflow. It does not contact banks, agencies, employers, transit providers, schools, building managers, police, merchants, or any institution on the user's behalf.
Use only official apps, statements, agency sites, or known contact channels, and do not give the agent passwords, PINs, codes, full account numbers, or full ID details.
Sensitive personal details could appear in the conversation or generated checklist if the user overshares.
The agent context may include sensitive location, wallet-content, ID, key, or access-badge information, but the prompt explicitly narrows inputs and discourages secrets.
Ask only for minimal, non-secret facts. Encourage placeholders and redactions. ... Last known place, last confirmed time, and possible route since then. ... Wallet contents by category, not full numbers
Use categories and placeholders, keep the checklist private, and avoid entering full card numbers, IDs, account numbers, passwords, one-time codes, or unredacted document images.