trust-wallet-mcp
Use Trust Wallet through the `twak` MCP server (bundled with the Trust Wallet plugin, including in Grok Bot) - set it up, connect the user's Trust Wallet app (WalletConnect) or create a separate agent wallet, check balances, send, receive, swap, buy or sell crypto. Use whenever the user mentions Trust Wallet, their crypto wallet, balances, sending or swapping tokens, buying or selling crypto, or when a `twak` MCP tool is missing or fails with CREDENTIALS_MISSING, PASSWORD_MISSING or WALLET_NOT_BOUND.
95%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill operates a crypto wallet via the `twak` MCP server and CLI, supporting direct financial operations such as transfers, swaps, buying, and selling crypto (SKILL.md:12-15). It includes two modes: a Trust Wallet app (WalletConnect) mode requiring external user approval on mobile (SKILL.md:69-92), and an Agent wallet mode where the agent signs and moves funds without explicit independent external service-layer validation (SKILL.md:101-138). Because the agent wallet mode permits direct financial transfers and swaps signed autonomously by the agent without independent service-layer access controls, it falls under High severity.
- Repository
trustwallet/tw-agent-skills
- Revision
070b585
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.