CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

agent-wallet

Give the AI agent its own EVM wallet with admin-controlled policies the agent CANNOT bypass even under prompt injection. Encrypted keystore (AES-256-GCM, scrypt KDF), policy file the agent has no tool to write, deterministic policy gate on every signing operation, optional local HTTP dashboard. Triggers: agent wallet, give the agent a wallet, agent address, fund the agent, agent autonomy, policy gate, kill switch, agent permissions, bounded autonomy, ERC-4337 alternative, session-key alternative.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Highly actionable content with strong validation checkpoints for a fund-moving skill, undermined by an internally contradictory 'What this skill does NOT do' section and a monolithic structure that inlines three sizable feature surfaces instead of splitting them into reference files.

Suggestions

Resolve the contradiction in 'What this skill does NOT do': it says Solana signing is 'not yet wired' and ERC-4337 is 'a future feature', while the v1.19+ and v1.21+ sections describe both as available — update or delete the stale bullets so the agent isn't left with conflicting instructions.

Split the Solana wallet, ERC-4337 session-keys, and dashboard-endpoints material into separate reference files (e.g. references/solana.md, references/erc4337.md) linked from a leaner SKILL.md overview, so the main file stays a navigable summary.

Trim the seven-layer dashboard security narrative and the endpoints table to the essentials (or move them into a dashboard reference file) — the core point is that no MCP tool can write the policy and the server is localhost-only with admin auth.

DimensionReasoningScore

Conciseness

The body is dense and specific — tables for tools, policy fields, and endpoints with almost no explanation of concepts Claude already knows. Not 5: the seven-layer 'Why this is safe even though the dashboard CAN edit the policy' narrative, the dashboard endpoints table, and the 'Credit accounting' section add tokens that could be trimmed or externalized.

4 / 5

Actionability

Fully executable throughout: exact tool invocations ('chaingpt_agent_wallet_sign_and_send chain=… to=… valueWei=… data=… memo="…"'), a copy-ready production policy.json, concrete setup commands for both passphrase options, and a keychain export command for backup. Common cases (setup, funding, pre-flight, refusal handling) are all covered with concrete examples.

5 / 5

Workflow Clarity

Clear sequences with explicit validation: setup options A/B, a numbered pre-flight checklist (status → balances → policy → sign) before any signing, and an explicit refusal feedback path ('do not try to work around it… surface the reason to the admin'). Not 5 because the 'What this skill does NOT do' section states Solana signing is 'not yet wired' and ERC-4337 is 'a future feature', directly contradicting the v1.19/v1.21 sections above and creating real workflow ambiguity for the agent.

4 / 5

Progressive Disclosure

There are no bundle files (no references/, scripts/, or assets/) and no external references at all — everything lives in one ~245-line SKILL.md. Section headers are clear, but content that clearly belongs in separate files (the Solana wallet guide, ERC-4337 session-key details, dashboard endpoint reference, full policy field reference) is inlined, matching anchor 3 rather than 4.

3 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete capabilities, explicit third-person 'what', and a dedicated trigger list that answers 'when' with natural phrasing. The only gap is a few missing synonyms for wallet-related terms in the trigger list.

DimensionReasoningScore

Specificity

Lists multiple concrete capabilities — 'Encrypted keystore (AES-256-GCM, scrypt KDF)', 'policy file the agent has no tool to write', 'deterministic policy gate on every signing operation', 'optional local HTTP dashboard' — covering the skill's full surface with no generic filler. Anchor 5 fits: comprehensive coverage of specific concrete capabilities; anchor 4 would require minor gaps, which are absent.

5 / 5

Completeness

Explicitly answers what ('its own EVM wallet with admin-controlled policies', keystore, policy gate, dashboard) and when via a dedicated 'Triggers:' clause listing concrete trigger phrases — an explicit 'Use when' equivalent, so the completeness cap of 3 does not apply and the anchor-5 example structure is matched.

5 / 5

Trigger Term Quality

The 'Triggers:' clause contains natural user phrasings like 'agent wallet', 'give the agent a wallet', 'fund the agent', and 'kill switch', plus adjacent-feature terms ('ERC-4337 alternative', 'session-key alternative'). Not 5 because common variations such as 'crypto wallet', 'hot wallet', or 'agent spending limits' are missing.

4 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (admin-controlled agent EOA wallet) with distinctive triggers like 'policy gate', 'bounded autonomy', and 'kill switch' that are unlikely to fire a different skill. Not lower: no meaningful overlap with generic wallet or permission skills.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

internet-court/internet-court-skill

Path

vendored/chaingpt/agent-wallet/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.