Web3 Privacy Literacy

• Analyzed: May 7, 2026, 7:21 PM
• Findings: 0
• Version: 1.0.0
• Hash: 8672d88ddff3e6d33c7add0094a5c25920ce60194c85b12e25de6f8740626911
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: web3-privacy-literacy Version: 1.0.0 The skill is a purely educational and descriptive tool designed to provide a reasoning framework for Web3 privacy. It explicitly forbids code execution, wallet connections, and the collection of sensitive information like private keys or seed phrases. The instructions in SKILL.md and the configuration in skill.json (no_code_execution: true) are safety-oriented and lack any indicators of malicious intent or high-risk capabilities.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Note

What this means

If the platform were to ask for wallet access or credentials when installing or using this skill, that would be inconsistent with the reviewed instructions and should be treated cautiously.

Why it was flagged

These signals describe high-impact wallet, signing, and credential capabilities, but the source files do not implement or request them and SKILL.md explicitly says the skill cannot connect to wallets, sign transactions, or handle private signing material.

Skill content

- requires-wallet
- can-sign-transactions
- requires-sensitive-credentials

Recommendation

Install only if it remains instruction-only and does not request wallet connection, transaction signing, seed phrases, private keys, or other sensitive credentials.