Skills/ClawHub/aawp

aawp@1.6.8

VERIFIED· install only

Publisher claims: "AAWP (AI Agent Wallet Protocol) — the only crypto wallet protocol built exclusively for AI Agents on EVM-compatible blockchains. Not for humans. The signer i..." Observed in sandbox: calls raw.githubusercontent.com, aawp.ai only, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher wfce · publishing for 251 daysInstalls 834Last detonated 18 min ago
$clawhub install aawp
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-15 and scored it 95/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: calls raw.githubusercontent.com, aawp.ai only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 2 scenarios
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.3snetworkCONNECT tcp://raw.githubusercontent.com:443 · not in the allow-list, refused
0.3snetworkCONNECT tcp://aawp.ai:443
0.3sprocessexited 1: (Use `node --trace-warnings ...` to show where the warning was created)
0.3sprocessscript backend runs setup only
0.3sprocessscript backend runs setup only
0.5sprocesssecond launch, clock +45 days, CI unset
0.8snetworkCONNECT tcp://raw.githubusercontent.com:443 · not in the allow-list, refused
0.8snetworkCONNECT tcp://aawp.ai:443
0.8sprocessexited 1: (Use `node --trace-warnings ...` to show where the warning was created)

Static findings

LOW
Financial transfer languageREADME.md:9 · Financial transfer language — potential advance-fee scam · informational: not an instruction fileThe only crypto wallet protocol built exclusively for AI Agents.<br>Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Financial transfer languageSKILL.md:80 · Financial transfer language — potential advance-fee scamThe only crypto wallet protocol built exclusively for AI Agents. Not for humans.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Financial transfer languageREADME.md:32 · Financial transfer language — potential advance-fee scam · informational: not an instruction fileAAWP is the first crypto wallet protocol where **only AI Agents can be the signer** — not humans, not companies, not the protocol itself. This is enforced at the contract level, not a policy.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Financial transfer languageSKILL.md:5 · Financial transfer language — potential advance-fee scamAAWP (AI Agent Wallet Protocol) — the only crypto wallet protocol built exclusivelyFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01

Cost to the agent

Instructions loaded
≈5,171 tok
1 file · 5 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.