skills/daaab/agent-skills/base-wallet/Gen Agent Trust Hub

base-wallet

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill manages Ethereum private keys and mnemonics, which are highly sensitive credentials.
  • The create-wallet.js script provides a --managed mode that saves private keys and mnemonics to the ~/.openclaw/wallets/ directory in plaintext.
  • Security measures are implemented to mitigate risk, including the use of chmod 600 for wallet JSON files and chmod 400 for mnemonic backups to restrict file access to the owner only.
  • [COMMAND_EXECUTION]: The skill provides several Node.js scripts intended for agent-driven blockchain interactions.
  • create-wallet.js handles local wallet generation and filesystem operations.
  • basemail-register.js performs Sign-In with Ethereum (SIWE) authentication and service registration via external API calls to api.basemail.ai.
  • check-balance.js interacts with official Base network RPC providers to retrieve account data.
  • [EXTERNAL_DOWNLOADS]: The skill relies on external libraries for its core functionality.
  • The ethers package is specified as a dependency for all cryptographic, signing, and blockchain communication tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:43 AM