registry / @agentlayer.tech/wallet / 0.1.71

@agentlayer.tech/wallet@0.1.71

NPM installer for the OpenClaw Agent Wallet local runtime.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 16 file(s), 458 KB of source, external domains: agent-layer-production.up.railway.app, api.mainnet-beta.solana.com, api.morpho.org, eth-api.lido.fi, eth.drpc.org, li.quest, mainnet.base.org, sepolia.base.org, sepolia.drpc.org, trade-api.gateway.uniswap.org

Source & flagged code

3 flagged

README.mdView file

•If you are an individual developer, researcher, student, security reviewer, or hobbyist, you can:

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

setup.shView file

•path = setup.sh kind = build_helper sizeBytes = 2795 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

setup.shView on unpkg

bin/openclaw-agent-wallet.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @agentlayer.tech/wallet@0.1.69 matchedIdentity = npm:QGFnZW50bGF5ZXIudGVjaC93YWxsZXQ:0.1.69 similarity = 0.938 summary = stored previous version shares package body but lacks this dangerous source file