📦 Kite Agent Wallet — 智能体钱包
v1.0.0为 AI 智能体提供模块化智能钱包协议，支持会话密钥、支出限额及在 Kite AI 网络上的安全委托交易管理。
0· 330·0 当前·0 累计
by @nihaovand下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears coherent for its stated purpose, but exercise caution before using it:
- Source provenance is unknown (no homepage or repository). Ask the author for the contract source code and an audit or repo link.
- Verify the listed contract addresses on the Kite explorers (testnet first) and inspect contract bytecode/source before sending real funds.
- Never give your primary private key to an agent. Use ephemeral session keys, a dedicated agent wallet with minimal funds, or a hardware ...详细分析 ▾
✓ 用途与能力
The name/description describe an AI-agent smart wallet; the SKILL.md provides contract addresses, RPC endpoints, and example ethers.js calls (create wallet, add session key, execute with session key) that are consistent with that purpose. There are no unrelated dependencies or surprising claims.
✓ 指令范围
The runtime instructions are limited to interacting with on-chain contracts (examples use ethers.getContractFactory / getContractAt and RPC URLs). The instructions do not tell the agent to read arbitrary files, harvest environment variables, or transmit data to unknown endpoints. They do assume a provider and signer exist but do not instruct exfiltration of secrets.
✓ 安装机制
Instruction-only skill with no install spec and no code files to run; nothing is downloaded or written to disk by the skill itself, which minimizes install-time risk.
ℹ 凭证需求
The skill declares no required environment variables or credentials (reasonable for an instruction-only spec). However, real use requires a JSON-RPC provider and signing keys (private keys, wallets or ephemeral session keys). The skill does not request these directly, so granting an agent the ability to sign or access private keys would be the principal risk — make sure any keys are provided deliberately and minimally (e.g., ephemeral session keys, hardware wallets, or dedicated agent accounts).
✓ 持久化与权限
always is false and the skill is user-invocable; it doesn't request persistent system presence or modify other skills/config. Autonomous invocation is enabled by default but is not combined with other red flags here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/25
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install kite-agent-wallet
镜像加速npx clawhub@latest install kite-agent-wallet --registry https://cn.longxiaskill.com