AWP Skill

• Analyzed: May 9, 2026, 8:06 AM
• Findings: 1
• Version: 1.7.0
• Hash: 8434d0c19bdcc4fbf8c126fdd50e96882490c7e3ead2f34165d39da9ac744f01
• Source: palm
• External report: View on VirusTotal

Findings (1)

The AWP skill bundle is a legitimate toolkit for the Agent Work Protocol, featuring strong security controls and transparent operations. Key indicators include explicit anti-phishing rules in SKILL.md (Rule 9), a two-layer contract allowlist in wallet-raw-call.mjs to prevent unauthorized contract interactions, and a state-machine-driven onboarding process via preflight.py. The background daemon (awp-daemon.py) is opt-in and read-only, focused on protocol monitoring, and all on-chain transactions require explicit user confirmation. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.