Is daaab/base-wallet safe?
Yes. daaab/base-wallet is safe to install. Oathe's behavioral security audit gave the base-wallet skill by daaab a trust score of 87/100 with 5 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/daaab/base-wallet
Is daaab/base-wallet safe to install?
This wallet management skill provides legitimate cryptocurrency functionality but involves inherent risks due to private key handling. While monitoring detected access to sensitive credential files, the skill code appears to follow security best practices and no malicious intent was identified.
What security issues were found in daaab/base-wallet?
Category Scores
Findings (5)
HIGH Sensitive Credential File Access -30 ▶
The monitoring detected access to multiple sensitive credential files including .env, SSH keys, AWS credentials, Docker config, and GCloud credentials during execution.
MEDIUM Cryptocurrency Private Key Management -25 ▶
This skill creates, stores, and manages cryptocurrency private keys, which represents an inherent high-risk functionality that could lead to financial loss if compromised.
MEDIUM JavaScript Code Execution -10 ▶
The skill contains executable JavaScript files that will run with agent permissions when invoked.
LOW External API Dependencies 0 ▶
The skill connects to external services including BaseMail API and Base network RPC endpoints, creating potential data leakage vectors.
INFO Security Best Practices Implemented 0 ▶
The skill implements security best practices including environment variable preference, file permission restrictions (600), and security warnings in documentation.
Should I install daaab/base-wallet?
Oathe's verdict for daaab/base-wallet is SAFE with a trust score of 87/100. Recommendation: Install with caution.