wallet

This skill appears to be a legitimate local wallet sandbox, but exercise caution before installing. Key points: - The installer uses 'curl ... | bash' and downloads an executable from https://test.clawwallet.cc — this executes remote code and is high risk. Review the remote install script and binary provenance (signatures/checksums) before running. Prefer official release channels (GitHub releases or a known vendor host) where possible. - The CLAY_AGENT_TOKEN (and AGENT_TOKEN alias) is a bearer token that grants sandbox API access; treat it like a private key/password. If an attacker gets it they can instruct the sandbox to sign transactions. Only provide tokens you trust and understand the token's scope. - The installer will write persistent wallet files into skills/claw-wallet-test (including .env.clay and identity.json). Back up any important data first and do installs in an isolated environment or VM if possible. - Confirm the distribution host (test.clawwallet.cc) is the expected, official host for this skill. The SKILL.md references a dev/test environment — that may imply the package is not a production release. - Before running, open the remote install URL in a browser or fetch it and inspect it locally instead of piping it directly to the shell. Verify the binary you download (consider checking hashes or signatures). If you cannot verify the distributor or do not want to run remote binaries from that host, consider declining installation or requesting a vetted release build from the vendor.