base-wallet
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages Ethereum private keys and mnemonics, which are highly sensitive credentials.
- The
create-wallet.jsscript provides a--managedmode that saves private keys and mnemonics to the~/.openclaw/wallets/directory in plaintext. - Security measures are implemented to mitigate risk, including the use of
chmod 600for wallet JSON files andchmod 400for mnemonic backups to restrict file access to the owner only. - [COMMAND_EXECUTION]: The skill provides several Node.js scripts intended for agent-driven blockchain interactions.
create-wallet.jshandles local wallet generation and filesystem operations.basemail-register.jsperforms Sign-In with Ethereum (SIWE) authentication and service registration via external API calls toapi.basemail.ai.check-balance.jsinteracts with official Base network RPC providers to retrieve account data.- [EXTERNAL_DOWNLOADS]: The skill relies on external libraries for its core functionality.
- The
etherspackage is specified as a dependency for all cryptographic, signing, and blockchain communication tasks.
Audit Metadata