EVM Crypto Wallet for Your Agent

• Outcome: Review
• Latest audit: Jul 10, 2026 · 3:08 AM UTC
• Version: 1.0.3

Overview

This wallet skill is mostly transparent, but it should be reviewed carefully because it installs unpinned remote code that can persist private keys and move real crypto funds.

Install only if you are comfortable letting an agent-managed local key control crypto funds. Review or pin the GitHub code before use, keep only small amounts in the wallet, protect ~/.evm-wallet.json, and manually verify every recipient, chain, token, amount, gas estimate, swap quote, and contract write before confirming.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The balance command is introduced with broad natural-language triggers like asking about 'balance' or 'portfolio,' which can be activated from ordinary conversation without strict scoping to an explicit wallet-operation request. In a wallet skill, accidental invocation is more dangerous than in a read-only utility because it can reveal sensitive financial information or start a chain of follow-on transactional actions.

Vague Triggers

Medium

• Confidence: 94% confidence
• Finding: The send-token section uses very broad triggers such as 'send, transfer, or pay someone,' which can overlap with everyday language and may cause the agent to prepare or execute a fund transfer in response to ambiguous prompts. In the context of a self-custodial wallet with local private keys, misactivation can directly lead to irreversible asset loss.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The swap triggers include generic terms like 'trade, buy, or sell tokens,' which can collide with broad discussion of markets or investing and cause an unintended transition from conversation into executable trading flow. Because swaps are value-moving operations with slippage, routing, and approval implications, accidental activation can create real financial harm.

Vague Triggers

Low

• Confidence: 87% confidence
• Finding: The contract-interaction trigger says to use the command when the user wants to call a smart contract function, but it lacks scope constraints, allowlists, or safety boundaries around arbitrary ABI signatures and write methods. In a wallet skill, this is especially dangerous because a malicious or confused prompt could induce approvals, token transfers, or harmful contract calls that drain assets.

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: evm-wallet-skill
description: Self-sovereign EVM wallet for AI agents. Use when the user wants to create a crypto wallet, check balances, send ETH or ERC20 tokens, swap tokens, or interact with smart contracts. Supports Base, Ethereum, Polygon, Arbitrum, and Optimism. Private keys stored locally — no cloud custody, no API keys required.
metadata: {"clawdbot":{"emoji":"💰","homepage":"https://github.com/surfer77/evm-wallet-skill","requires":{"bins":["node","git"]}}}
---

• Confidence: 90% confidence
• Finding: create a crypto wallet, check balances, send ETH or ERC20 tokens, swap tokens, or interact with smart contracts. Supports Base, Ethereum, Polygon, Arbitrum, and Optimism. Private keys stored locally —

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.