Security audit
Security checks across malware telemetry and agentic risk
This AWP skill is largely coherent for crypto wallet and protocol work, but it gives agents high-impact transaction authority through an under-scoped raw call bridge and an unpinned remote wallet installer.
Install only if you trust the AWP publisher and are comfortable with a skill that can sign and submit AWP protocol transactions. Review any awp-wallet installation command before running it, prefer a pinned or manually verified wallet release, keep minimal funds in the agent wallet, and require clear confirmation before any relay, signature, staking, allocation, governance, or raw-call action.
channel, target = _get_openclaw_config()
if channel and target:
try:
subprocess.run(
[
openclaw_bin,
"message",**2. EIP-712 RegisterWorknet signature** (authorizes registration parameters):
```bash
# Get AWPRegistry nonce via JSON-RPC
NONCE=$(curl -s -X POST https://api.awp.sh/v2 \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","method":"nonce.get","params":{"address":"'$WALLET_ADDR'"},"id":1}' | jq -r '.result.nonce')**3. Submit to relay:**
```bash
curl -X POST https://api.awp.sh/api/relay/register-worknet \
-H "Content-Type: application/json" \
-d '{
"chainId": 8453,**2. EIP-712 RegisterWorknet signature** (authorizes registration parameters):
```bash
# Get AWPRegistry nonce via JSON-RPC
NONCE=$(curl -s -X POST https://api.awp.sh/v2 \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","method":"nonce.get","params":{"address":"'$WALLET_ADDR'"},"id":1}' | jq -r '.result.nonce')**3. Submit to relay:**
```bash
curl -X POST https://api.awp.sh/api/relay/register-worknet \
-H "Content-Type: application/json" \
-d '{
"chainId": 8453,65/65 vendors flagged this skill as clean.
No suspicious patterns detected.