DF aawp

AAWP (AI Agent Wallet Protocol) — the only crypto wallet protocol built exclusively for AI Agents on EVM-compatible blockchains and Solana. Not for humans. The signer is the AI Agent itself, cryptographically bound at wallet creation. Supports wallet lifecycle management, token transfers, DEX swaps, cross-chain bridging, Solana native trading (Pump.fun SDK + Jupiter), token launches, DCA automation, and price alerts.

Not recommendedlow grade D

ClawHub Agent Skills author: AAWP.AI v2.0.0 MIT-0 38 files · 6 scripts body ≈ 5 772 tokens Open the sourceclawhub.ai↗ analyzed 2 d ago

AAWP (AI Agent Wallet Protocol) — the only crypto wallet protocol built exclusively for AI Agents on EVM-compatible blockchains and Solana.

As a process F 43/100 · Will not run — References files that are not bundled: scripts/*.js

Integration AI and agents Infrastructuretype and topics are labelled automatically from the skill text

Runs in: OpenClaw Claude / Claude Code ChatGPT / Codex Gemini CLI Cursor GitHub Copilot / VS Code Qwen Code Kimi Code CLI Z.ai (GLM) DeepSeek (Deep Code) Mistral Vibe LangChain (deepagents) Goose OpenCode

JSON

Technical rating

48/100

safety, quality, tests

Safety 60%: 42
Quality 40%: 57
Run on models: none yet

Process rating

43/100

Will not run

References files that are not bundled: scripts/*.js

Tools and files w 18: 0
Inputs and preconditions w 11: 0
Progress reporting w 2: 0

the three weakest of ten parameters · all ten

What is at stake

Medium-severity findings: the skill is probably honest, but read what alarmed the scanner.

Dangerous commands medium severity

Below is the worst case for this category. The finding here is medium: the guard saw a sign, not a proof.

If you install

The skill contains commands that delete files, rewrite disks or execute code fetched from the network. The agent may run them without asking if it believes the instructions require it.

For the author

Replace destructive commands with safe equivalents that ask for confirmation, scope them to one folder, and stop piping curl into a shell: pin a version and a checksum.

How to improve

Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
The SKILL.md body is over 5,000 tokens: move reference detail into references/ and load it when needed.
The text references files that are not there: add them or drop the references.

For the model run — optional

Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 50

✓ No critical or high findings

Medium and low: 50

medium Dangerous commands cmd-persistence scripts/dca.js:73

Persistence mechanism (cron / launchd / scheduled task / autorun registry) (quoted — discussed, not commanded)
```
execSync(`(crontab -l 2>/dev/null; echo '${cronLine}') | crontab -`, { stdio: 'pipe' });
```
quoted
medium Dangerous commands cmd-persistence scripts/price-alert.js:144

Persistence mechanism (cron / launchd / scheduled task / autorun registry) (quoted — discussed, not commanded)
```
execSync(`(crontab -l 2>/dev/null; echo '${cronLine}') | crontab -`, { stdio: 'pipe' });
```
quoted
low Secrets in code secret-high-entropy-token config/chains.json:8

High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition)
```
"factory": "0xAA…aAA",
```
detector
low Secrets in code secret-high-entropy-token config/chains.json:9

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
"identity": "0xAA…D1d",
```
quoted
low Secrets in code secret-high-entropy-token config/chains.json:10

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
"walletDeployer": "0xB9…91e",
```
quoted
low Secrets in code secret-high-entropy-token config/chains.json:14

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
"USDC": "0x83…913",
```
quoted
low Secrets in code secret-high-entropy-token config/chains.json:15

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
"USDT": "0xfd…bb2",
```
quoted
low Secrets in code secret-high-entropy-token lib/multicall.js:8

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const MULT…DDR = '0xcA…A11';
```
quoted
low Secrets in code secret-high-entropy-token lib/pump.js:37

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
return info.owner.equals(new PublicKey('Toke…uEb'))
```
quoted
low Secrets in code secret-high-entropy-token lib/solana-swap.js:11

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const SOL_MINT = 'So11…112';
```
quoted
low Secrets in code secret-high-entropy-token lib/solana-swap.js:12

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const USDC_MINT = 'EPjF…t1v';
```
quoted
low Secrets in code secret-high-entropy-token lib/solana.js:12

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const PROGRAM_ID_STR = 'AAwp…qiS';
```
quoted
low Secrets in code secret-high-entropy-token README.md:348

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Factory** | [`0xAA…aAA`](https://basescan.org/address/0xAA…aAA) |
```
table
low Secrets in code secret-high-entropy-token README.md:349

High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition; documentation table row)
```
| **Identity** | [`0xAA…D1d`](https://basescan.org/address/0xAA…D1d) |
```
detectortable
low Secrets in code secret-high-entropy-token README.md:357

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Program** | [`AAwp…qiS`](https://explorer.solana.com/address/AAwp…qiS) |
```
table
low Secrets in code secret-high-entropy-token README.md:358

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Factory PDA** | `6EkR…txx` |
```
table
low Secrets in code secret-high-entropy-token README.md:359

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Identity PDA** | `8Aef…Aej` |
```
table
low Dangerous commands cmd-cron-mention scripts/dca.js:71

Mentions editing / listing crontab (quoted — discussed, not commanded)
```
const existing = execSync('crontab -l 2>/dev/null || true', { encoding: 'utf8' });
```
quoted
low Dangerous commands cmd-cron-mention scripts/dca.js:73

Mentions editing / listing crontab (quoted — discussed, not commanded)
```
execSync(`(crontab -l 2>/dev/null; echo '${cronLine}') | crontab -`, { stdio: 'pipe' });
```
quoted
low Dangerous commands cmd-cron-mention scripts/dca.js:91

Mentions editing / listing crontab (quoted — discussed, not commanded)
```
const existing = execSync('crontab -l 2>/dev/null', { encoding: 'utf8' });
```
quoted
low Secrets in code secret-high-entropy-token scripts/limit-order.js:45

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const INCH_LO_CONTRACT_BSC = '0x11…A65';
```
quoted
low Secrets in code secret-high-entropy-token scripts/limit-order.js:70

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const COW_SETTLEMENT = '0x90…b41';
```
quoted
low Secrets in code secret-high-entropy-token scripts/limit-order.js:74

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
eth:     '0xC9…110',
```
quoted
low Secrets in code secret-high-entropy-token scripts/limit-order.js:75

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
base:    '0xC9…110',
```
quoted
low Secrets in code secret-high-entropy-token scripts/limit-order.js:76

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
arb:     '0xC9…110',
```
quoted
low Secrets in code secret-high-entropy-token scripts/nft.js:66

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
'0xBC…13D': 'BAYC',
```
quoted
low Secrets in code secret-high-entropy-token scripts/nft.js:67

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
'0xb4…BBB': 'CryptoPunks',
```
quoted
low Secrets in code secret-high-entropy-token scripts/nft.js:68

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
'0x60…7c6': 'MAYC',
```
quoted
low Secrets in code secret-high-entropy-token scripts/nft.js:69

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
'0x49…28B': 'CloneX',
```
quoted
low Secrets in code secret-high-entropy-token scripts/nft.js:72

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
'0xd4…5e2': 'OnchainGasPower',
```
quoted
low Secrets in code secret-high-entropy-token scripts/portfolio.js:30

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const MC3_ADDR = '0xcA…A11';
```
quoted
low Secrets in code secret-high-entropy-token scripts/portfolio.js:48

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
USDC:  '0x83…913',
```
quoted
low Secrets in code secret-high-entropy-token scripts/portfolio.js:50

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
cbBTC: '0xcb…3Bf',
```
quoted
low Secrets in code secret-high-entropy-token scripts/portfolio.js:51

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
USDbC: '0xd9…6CA',
```
quoted
low Secrets in code secret-high-entropy-token scripts/portfolio.js:52

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
DAI:   '0x50…0Cb',
```
quoted
low Dangerous commands cmd-cron-mention scripts/price-alert.js:142

Mentions editing / listing crontab (quoted — discussed, not commanded)
```
const existing = execSync('crontab -l 2>/dev/null || true', { encoding: 'utf8' });
```
quoted
low Dangerous commands cmd-cron-mention scripts/price-alert.js:144

Mentions editing / listing crontab (quoted — discussed, not commanded)
```
execSync(`(crontab -l 2>/dev/null; echo '${cronLine}') | crontab -`, { stdio: 'pipe' });
```
quoted
low Dangerous commands cmd-background-process scripts/provision.sh:198

Starts a background / autostarted process
```
nohup node scripts/start-daemon.js > "$OUT" 2>&1 &
```
low Dangerous commands cmd-background-process scripts/restart-daemon.sh:45

Starts a background / autostarted process
```
nohup node scripts/start-daemon.js > "$OUT" 2>&1 &
```
low Secrets in code secret-high-entropy-token scripts/wallet-manager.js:426

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
const MC3 = chai…ll3 || '0xcA…A11';
```
quoted
low Secrets in code secret-high-entropy-token scripts/yield.js:33

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
eth:     '0x87…4E2',
```
quoted
low Secrets in code secret-high-entropy-token scripts/yield.js:34

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
base:    '0xA2…1c5',
```
quoted
low Secrets in code secret-high-entropy-token scripts/yield.js:35

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
arb:     '0x79…4aD',
```
quoted
low Secrets in code secret-high-entropy-token scripts/yield.js:36

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
op:      '0x79…4aD',
```
quoted
low Secrets in code secret-high-entropy-token scripts/yield.js:37

High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
```
polygon: '0x79…4aD',
```
quoted
low Secrets in code secret-high-entropy-token SKILL.md:507

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Factory Proxy** | `0xAA…aAA` |
```
table
low Secrets in code secret-high-entropy-token SKILL.md:508

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| **Identity Proxy** | `0xAA…D1d` |
```
table
low Secrets in code secret-high-entropy-token SKILL.md:548

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| Program ID | `AAwp…qiS` |
```
table
low Secrets in code secret-high-entropy-token SKILL.md:550

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| AI Signer | `BrZh…goi` |
```
table
low Secrets in code secret-high-entropy-token SKILL.md:551

High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
```
| Wallet PDA | `CKeD…b4f` |
```
table

Files scanned: 38. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

warning description-no-when description does not say WHEN to use the skill (no "use when")
warning body-long SKILL.md body ≈ 5772 tokens (recommended < 5000); move details to references/
warning missing-ref reference to a missing file: scripts/*.js
note frontmatter-key unknown frontmatter key "environment"
note frontmatter-key unknown frontmatter key "credentials"
note frontmatter-key unknown frontmatter key "persistence"
note frontmatter-key unknown frontmatter key "native_binary"
note frontmatter-key unknown frontmatter key "risk_disclosure"

Process rating: all ten parameters 43/100

Will not run. References files that are not bundled: scripts/*.js

0Tools and files. 1 referenced file(s) missing: scripts/*.js
0Inputs and preconditions. Does not say what the process needs to start
0Progress reporting. Says nothing while it works
30Running it twice. 21 mutating operations with no state check
40Consistency. Frontmatter name (aawp) differs from the folder (aawp-ai)
50When it triggers. No condition that starts the skill
50Failures and branches. 0 branches, has a failure section
60Result and completion. Output format stated, no completion criterion
70Execution cost. Instruction body is 5772 tokens
100Steps. 17 steps

medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
low 17 top-level sections: this looks like several domains in one skill
low The response is described with custom markup (9 tags): a typed call is more reliable

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

+5Description has no quoted example phrases that should trigger the skill
-38 of 21 scripts are never mentioned in SKILL.md
+1No license
+2Single-language instructions
+4Description says when NOT to use the skill
+3Description length 420: enough signal without eating the budget
+4Structure: 44 headings
+3Step-by-step instructions: 17 items
+3Output format is stated explicitly
+4Has examples (23 code blocks)

Quality base 70; lint remarks subtract, signals add up to 100. Result: 57.

External checks

ClawHub: suspicious

The skill's functionality (an autonomous AI-only wallet) matches the code and runtime it installs, but several installation and persistence details (native binary/daemon, remote fetches, cron registration) raise meaningful risk and some internal inconsistencies that you should review before installing.

LLM: suspicious (medium) · VirusTotal: suspicious · 11 Mar 2026

Tests

— no evals.json

— no spec.yaml

— not run on models

Files · 38

README.md 15K
SKILL.md 27K
WALLET_SETUP.md 5K
bin/install.js 8K
config/chains.json 4K
core/index.d.ts 3K
core/loader.js 1K
daemon/client.js 1K
daemon/daemon.js 1K
lib/address-book.js 2K
lib/gas-estimator.js 2K
lib/multicall.js 3K
lib/nonce-manager.js 2K
lib/pump.js 23K
lib/solana-swap.js 6K
lib/solana.js 6K
lib/tx-history.js 1K
scripts/binary-hash.sh 2K
scripts/bootstrap.sh 2K
scripts/dca.js 9K
scripts/deploy-clanker.js 14K
scripts/doctor.sh 2K
scripts/ensure-daemon.sh 2K
scripts/inject-shard.js 2K
scripts/limit-order.js 28K
scripts/nft.js 25K
scripts/portfolio.js 18K
scripts/price-alert.js 12K
scripts/provision.sh 9K
scripts/restart-daemon.sh 1K
scripts/restore-impl.js 4K
scripts/sign-worker.js 3K
scripts/start-daemon.js 4K
scripts/swap.js 32K
scripts/transfer-token-raw.js 2K
scripts/unwrap-weth.js 2K
scripts/wallet-manager.js 88K
scripts/yield.js 34K

Frontmatter

version: 2.0.0

environment: [{"name":"AAWP_GUARDIAN_KEY","description":"Private key for the Guardian gas-relay wallet (auto-generated in config/guar

credentials: [{"name":"Guardian Key","description":"ECDSA private key for the gas-relay wallet. Auto-generated on first provision and

persistence: [{"type":"daemon","description":"Local signing daemon (background process) listens on a Unix socket at /tmp/.aawp-daemon

native_binary: {"file":"core/aawp-core.node","hash_file":"core/aawp-core.node.hash","description":"Precompiled Node.js N-API addon (lin

risk_disclosure: This skill runs a persistent signing daemon and can autonomously submit on-chain transactions as the AI Agent. It manage

Dates

In catalog since 10 Mar 2026

Updated in catalog 11 Sept 2026

First seen here 10 Sept 2026

Last analysis 12 Sept 2026, 23:27 UTC

Last seen in crawl 8 h ago

Score history

Date		Score	Safety	Qual.
12 Sept 2026	D	48	42	57
10 Sept 2026	D	44	30	64

Similar skills

B aawp ClawHub
D aawp LeoYeAI/openclaw-master-skills