registry / @agentlayer.tech/wallet / 0.1.113
@agentlayer.tech/wallet@0.1.113
Universal AgentLayer wallet installer for OpenClaw, Codex, Claude Code, and Hermes.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource confirms user-invoked, first-party agent extension setup and cached MCP configuration changes, which warrant a warning under the supplied policy. No automatic npm lifecycle mutation or concrete malicious chain was established.
Static reason
One or more suspicious static signals were detected.
Trigger
Running wallet claude-code install or setup, or selecting Claude Code during universal setup.
Impact
Changes the agent's available extension and executable runtime configuration; warrants a warning under the agent integration policy.
Mechanism
Registers a user-scoped local marketplace, installs agent-wallet, records the managed integration, and pins its cached MCP runtime home.
AI rationale
Source confirms user-invoked, first-party agent extension setup and cached MCP configuration changes, which warrant a warning under the supplied policy. No automatic npm lifecycle mutation or concrete malicious chain was established.
Evidence
bin/openclaw-agent-wallet.mjs~/.claude/agentlayer-local~/.claude/plugins/cache.mcp.json
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Explicit Claude Code setup registers a local marketplace in user scope and installs the wallet plugin.
- Setup visits the wallet plugin's cached versions and modifies their MCP configuration to select the wallet runtime home.
- The CLI exposes this behavior through its claude-code install or setup command.
- Universal setup prompts only for a fresh detected installation in an interactive terminal; flags and noninteractive execution bypass that prompt.
- Setup records the Claude Code integration as managed.
Evidence against
- package.json has no automatic npm install lifecycle hooks or runtime self-dependency.
- Cache changes are restricted to the package's agent-wallet plugin and its MCP server entry.
- Inspected telemetry sends installation event metadata; no credential harvesting or covert credential export was established.
- The connector smoke helper performs packaging checks; daemon management checks local service ownership.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
5 flaggedconnectors/scripts/smoke-packed-packages.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { createHash } from "node:crypto";
High
Child Process
Package source references child process execution.
connectors/scripts/smoke-packed-packages.mjsView on unpkg · L1bin/openclaw-agent-wallet.mjsView file
728const result = spawnSync("command", ["-v", name], {
L729: shell: true,
L730: stdio: "ignore",
High
3018target_version: packageVersion,
L3019: fix: `npm install --global ${packageJson.name}@${packageVersion}`,
L3020: };
...
L3022: const packageSpec = `${packageJson.name}@${packageVersion}`;
L3023: const result = spawnSync(
L3024: installed.npm_bin,
Findings
4 High4 Medium5 Low
HighChild Processconnectors/scripts/smoke-packed-packages.mjs
HighShellbin/openclaw-agent-wallet.mjs
HighSame File Env Network Executionbin/lib/evm-daemon.mjs
HighRuntime Package Installbin/openclaw-agent-wallet.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersetup.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @agentlayer.tech/wallet@0.1.113.
See all versions of @agentlayer.tech/wallet for other recorded verdicts.
- Review the evidence and your use of @agentlayer.tech/wallet@0.1.113 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.