WalletChan — Human-in-the-Loop Wallet Co-Pilot

Drive the WalletChan browser extension to help a user interact with web3 dapps. The agent performs UI automation; the user retains full control of their funds through WalletChan's built-in confirmation screens.

Install via skills.sh: npx skills add apoorvlathey/walletchan-skill Canonical source: github.com/apoorvlathey/walletchan-skill

Security Model (read first)

WalletChan is designed around a two-tier credential model so that an AI agent can assist with dapp interactions without ever holding the keys to the vault. Understanding this model is essential before following the rest of the skill.

Two credentials, two very different roles

Credential	Role	Who holds it	What it unlocks
Master Password	Vault key. Decrypts private keys and seed phrases.	User only. Never shared with any agent, ever.	Private key export, seed phrase reveal, security settings.
Agent Password	Scoped operational credential. Think of it like an API key with a narrow permission set.	User generates it in WalletChan settings and shares it with the agent.	Unlocking the extension UI so the agent can navigate to a pending request and click "Confirm" or "Reject" after the user sees the decoded details.