📦 Guardrail Agent Smart Account Wallets — 链上支出护栏
v1.1.1为 AI 智能体提供链上支出护栏：一键部署符合 ERC-4337 标准的智能账户，内置策略限额，确保智能体只能在授权范围内动用资金，防止超额转账或恶意操作，让链上自动化更安全可控。
0· 559·0 当前·0 累计
by 下载技能包
最后更新
2026/4/1
安全扫描
OpenClaw
安全
high confidenceThe skill's declared purpose (deploying and enforcing ERC-4337 smart-account policies) aligns with its runtime instructions and requested environment variables; nothing in the package suggests unrelated or hidden behavior.
评估建议
This skill appears internally consistent, but review these operational risks before installing: 1) Vet the AgentGuardrail service and any external signer you use (hosting, auth, audit, revocation). 2) Never paste private keys; prefer external signers, wallet prompts, or short-lived session keys as documented. 3) Treat GUARDRAIL_RPC_URL and any signer auth tokens as sensitive and store them in secure secret storage. 4) Test on a non-production chain (e.g., Sepolia/testnet) to verify deployed cont...详细分析 ▾
✓ 用途与能力
Name/description request JSON-RPC access and a signing mode; the required env vars (GUARDRAIL_CHAIN_ID, GUARDRAIL_RPC_URL, GUARDRAIL_SIGNING_MODE) match the stated on-chain deployment/signing needs. Optional secrets (signer endpoint/token, dashboard API key) are appropriate for the described management and signing modes.
ℹ 指令范围
SKILL.md is an instruction-only spec that stays on-topic: it explains building UserOperations, on-chain validation, and management via the AgentGuardrail API. It explicitly forbids asking for private keys in chat and instructs read-only operation when signing is not configured. Note: the instructions include sending transactions/validation requests to external endpoints (agentguardrail.xyz or an external signer) — this is expected for the purpose but is an important external-data flow to review before use.
✓ 安装机制
No install spec and no code files — instruction-only skills have minimal filesystem/install risk. Nothing is downloaded or executed by default.
✓ 凭证需求
The requested environment variables are proportional and well-justified for on-chain operations. Marking GUARDRAIL_RPC_URL as primary is reasonable (RPC endpoints often contain API keys). Optional signer endpoint and auth token are appropriate only when using external_signer.
✓ 持久化与权限
The skill is not 'always' enabled and requires user invocation. It doesn't request system or other-skill config paths, nor does it demand persistent privileges beyond connection strings and optional API tokens.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.12026/2/22
guardrail-smart-accounts v1.1.1 - Updated smart contract addresses for both Base Mainnet and Sepolia Testnet in the documentation. - No changes to code or runtime configuration.
● 无害
安装命令
点击复制官方npx clawhub@latest install guardrail-smart-accounts
镜像加速npx clawhub@latest install guardrail-smart-accounts --registry https://cn.longxiaskill.com