registry / @agentlayer.tech/wallet / 0.1.119
@agentlayer.tech/wallet@0.1.119
Universal AgentLayer wallet installer for OpenClaw, Codex, Claude Code, and Hermes.
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe package includes a first-party agent plugin setup flow that modifies user-scoped Claude Code integration state when explicitly invoked. The source supports a warning for this capability, but does not establish malicious behavior warranting a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the Claude Code install command without the skip-enable option.
Impact
The plugin becomes available to Claude Code after setup; no unrelated agent configuration change or credential disclosure was identified in this path.
Mechanism
The installer links its local plugin into a marketplace, registers that marketplace, and requests a user-scoped plugin installation.
AI rationale
The package includes a first-party agent plugin setup flow that modifies user-scoped Claude Code integration state when explicitly invoked. The source supports a warning for this capability, but does not establish malicious behavior warranting a publish block.
Evidence
bin/openclaw-agent-wallet.mjs
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes the wallet command through the package CLI.
- Claude Code plugin setup is reachable through a dedicated install command.
- The installer creates a local marketplace entry for this package’s agent-wallet plugin.
- Unless skipped, setup registers and installs the plugin at user scope.
Evidence against
- The integration is first-party and activated through an explicit CLI install command; the installer also supports skipping enablement.
- The inspected source shows no unrelated agent configuration mutation or credential transfer in this setup path.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggedconnectors/scripts/smoke-packed-packages.mjsView file
1import { execFileSync } from "node:child_process";
L2: import { createHash } from "node:crypto";
High
Child Process
Package source references child process execution.
connectors/scripts/smoke-packed-packages.mjsView on unpkg · L1bin/openclaw-agent-wallet.mjsView file
728const result = spawnSync("command", ["-v", name], {
L729: shell: true,
L730: stdio: "ignore",
High
3018target_version: packageVersion,
L3019: fix: `npm install --global ${packageJson.name}@${packageVersion}`,
L3020: };
...
L3022: const packageSpec = `${packageJson.name}@${packageVersion}`;
L3023: const result = spawnSync(
L3024: installed.npm_bin,
Findings
4 High4 Medium5 Low
HighChild Processconnectors/scripts/smoke-packed-packages.mjs
HighShellbin/openclaw-agent-wallet.mjs
HighSame File Env Network Executionbin/lib/evm-daemon.mjs
HighRuntime Package Installbin/openclaw-agent-wallet.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersetup.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @agentlayer.tech/wallet@0.1.119.
See all versions of @agentlayer.tech/wallet for other recorded verdicts.
- Review the evidence and your use of @agentlayer.tech/wallet@0.1.119 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.