openclaw-ai-metamask-wallet-automation

Warn

Audited by Snyk on Sep 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill references an external GitHub repository (olot-1477/Openclaw-AI-Metamask-26) used during setup via git clone to build and install the core framework code, but the publisher provenance is unknown and personal, classifying it as a high-risk unverifiable runtime dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documentation describes the "openclaw-ai-metamask-wallet-automation" framework, which explicitly includes tools and APIs for EVM-compatible wallet automation, transaction queuing, local key derivation, and blockchain transaction submission (e.g., executing transactions, interacting with smart contracts, and submitting transfers on Ethereum, BSC, and Polygon). These represent direct financial execution capabilities involving crypto wallets and blockchain transactions.

Issues (2)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 12, 2026, 06:49 PM
Issues
2
Security Audit — snyk — openclaw-ai-metamask-wallet-automation