crypto-wallet

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly named "crypto-wallet" and its description says "Manage crypto wallets and transactions." This is a specific financial tool focused on crypto wallet management and transaction handling (which implies creating/signing/sending crypto transactions). Under the core rule, this is specifically designed for financial operations (crypto/blockchain) and therefore constitutes direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The prompt explicitly instructs copying the skill into /root/.openclaw/... which requires elevated privileges and directs modification of a root-owned path, so it pushes the agent toward actions that alter the machine state with sudo-level access.