registry / @agentlayer.tech/wallet / 0.1.115
@agentlayer.tech/wallet@0.1.115
Universal AgentLayer wallet installer for OpenClaw, Codex, Claude Code, and Hermes.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource confirms first-party agent plugin installation and subsequent managed configuration refresh, warranting a behavior-specific warning. The absence of npm install hooks and the wallet-specific destinations do not support a malicious publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Running wallet agent setup or later installation and update commands for managed integrations.
Impact
Changes the wallet integration available to the agent and enables subsequent refreshes without repeating the fresh-install prompt.
Mechanism
Registers a user-scoped local marketplace, installs its wallet plugin, and refreshes the plugin and OPENCLAW_HOME configuration in cached copies.
AI rationale
Source confirms first-party agent plugin installation and subsequent managed configuration refresh, warranting a behavior-specific warning. The absence of npm install hooks and the wallet-specific destinations do not support a malicious publish block.
Evidence
bin/openclaw-agent-wallet.mjsbin/lib/integrations.mjs~/.claude/agentlayer-local~/.claude/plugins/cache
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a wallet CLI without npm install lifecycle hooks or runtime self-dependencies.
- Explicit Claude Code install or setup commands register and install the wallet plugin in user scope.
- Setup visits cached wallet plugin versions and writes OPENCLAW_HOME into their MCP configuration.
- Managed integration refresh reinstalls the plugin and repins cached configuration during later wallet installation or updates.
- The connector smoke helper packs local packages in a temporary directory.
- The daemon helper restricts its service URL check to HTTP loopback addresses.
Evidence against
- The inspected configuration changes target the package's own wallet integration, rather than unrelated agent instructions.
- No concrete covert credential export or malicious install-time execution was established.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
5 flaggedconnectors/scripts/smoke-packed-packages.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { createHash } from "node:crypto";
High
Child Process
Package source references child process execution.
connectors/scripts/smoke-packed-packages.mjsView on unpkg · L1bin/openclaw-agent-wallet.mjsView file
728const result = spawnSync("command", ["-v", name], {
L729: shell: true,
L730: stdio: "ignore",
High
3018target_version: packageVersion,
L3019: fix: `npm install --global ${packageJson.name}@${packageVersion}`,
L3020: };
...
L3022: const packageSpec = `${packageJson.name}@${packageVersion}`;
L3023: const result = spawnSync(
L3024: installed.npm_bin,
Findings
4 High4 Medium5 Low
HighChild Processconnectors/scripts/smoke-packed-packages.mjs
HighShellbin/openclaw-agent-wallet.mjs
HighSame File Env Network Executionbin/lib/evm-daemon.mjs
HighRuntime Package Installbin/openclaw-agent-wallet.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersetup.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @agentlayer.tech/wallet@0.1.115.
See all versions of @agentlayer.tech/wallet for other recorded verdicts.
- Review the evidence and your use of @agentlayer.tech/wallet@0.1.115 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.