技能详情（站内镜像，无评论）
作者：Apoorv Lathey @apoorvlathey
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 35 · 0当前安装量· 0历史安装量
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：apoorvlathey/walletchan
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's instructions and requirements are internally consistent with a browser-extension wallet automation tool, but it grants high-risk capabilities (ability to unlock and confirm transactions) and expects the user to share an Agent Password — so users should proceed with caution and supervise any use.
目的
The name/description (WalletChan browser-wallet automation) aligns with the runtime instructions: it requires Chrome with remote debugging and the WalletChan extension and describes navigating dapps, unlocking the extension, and confirming transactions. There are no unrelated binaries, installs, or credentials requested in the metadata that would be out of place for this purpose.
说明范围
The SKILL.md instructs the agent to control the browser via CDP, open dapp pages, click UI elements, enter the Agent Password to unlock the wallet, and confirm or reject transactions. Those actions are within the stated purpose but grant the agent direct capability to move funds if the Agent Password is provided. The doc also references using features like 'Simulate on Tenderly' (potential external data transmission via the extension UI) — thi…
安装机制
This is instruction-only with no install spec and no code files, so nothing is written to disk by the skill itself. That minimizes supply-chain risk; the only installation step is the user installing the WalletChan extension and running Chrome with remote debugging, which the README correctly documents.
证书
The skill asks the user to set and share an Agent Password (a runtime secret) but declares no required environment variables or primary credential in the registry metadata. Requiring the Agent Password is proportional to the task (unlocking the extension to confirm txs), but the skill's metadata does not reflect that a secret will be needed. The SKILL.md explicitly warns not to share the Master Password, which is appropriate.
持久
always is false and there is no install that modifies other skills or system config. Autonomous invocation is allowed by default (disable-model-invocation: false) — this is platform standard, but note that autonomous invocation combined with the ability to unlock and confirm transactions would give the skill significant power if the Agent Password is provided.
综合结论
This skill appears to do what it says, but it needs the user's Agent Password to unlock the wallet and confirm transactions — that effectively gives the agent the ability to move funds. Only share an Agent Password if you trust the agent invocation and will supervise every action. Never share your Master Password. Recommended precautions: (1) Use a dedicated Chrome profile/user-data-dir with only WalletChan installed; (2) run Chrome with remot…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「WalletChan」。简介：Interact with web3 dapps using the WalletChan browser extension via Chrome CDP.…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/apoorvlathey/walletchan/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。