Install
$ agentstack add skill-vaquarkhan-web3-agent-skills-skill-01-wallet-management ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Wallet Management
When to Use
- Creating or importing HD wallets (BIP-39/BIP-44)
- Configuring ERC-4337 smart accounts (bundlers, paymasters)
- Setting up Gnosis Safe or multi-sig workflows
- Implementing social recovery or session keys
- Managing wallet connections (WalletConnect, EIP-6963)
Prerequisites
- MCP:
blockchain-rpc-serverfor chain reads - MCP:
compliance-screening-serverbefore sending to external addresses - Apply all rules in
guardrails/web3-guardrails.yaml
Workflow
1. Wallet Type Selection
| Use Case | Recommendation | |----------|----------------| | Single user EOA | HD wallet (MetaMask-compatible path m/44'/60'/0'/0/n) | | Team treasury | Gnosis Safe multi-sig | | Gasless UX | ERC-4337 smart account + paymaster | | High-frequency trading | Session keys with spending limits |
2. HD Wallet Derivation
Ethereum path: m/44'/60'/0'/0/{index}
Solana path: m/44'/501'/{index}'/0'
Use references/hd-paths.md for all supported chains. Never log or persist mnemonic phrases.
3. ERC-4337 Account Abstraction
- Deploy or connect to existing smart account (SimpleAccount, Kernel, Safe4337)
- Configure entry point:
0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789(v0.6) - Select bundler URL (Pimlico, Alchemy, Stackup)
- Optional: configure paymaster for sponsored gas
4. Multi-Sig (Safe)
- Create Safe with threshold M-of-N
- Add owners via
createProxyWithNonce - Propose transactions via Safe Transaction Service API
- Collect signatures off-chain, execute on-chain
5. Pre-Execution Checks
- [ ] Simulate transaction via
eth_callor Tenderly - [ ] Screen recipient via compliance MCP
- [ ] Verify chain ID matches intended network
- [ ] Confirm value ≤ $10,000 or obtain user confirmation
Key Security Rules
- NEVER output, store, or transmit private keys or seed phrases
- Use hardware wallets or secure enclaves for mainnet signing
- Rotate session keys regularly; set expiry and spending caps
- Prefer read-only RPC for balance queries
References
references/hd-paths.md— BIP-44 paths per chainreferences/erc4337-setup.md— Smart account configurationknowledge-base/chains/— Per-chain RPC and explorer URLs
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: vaquarkhan
- Source: vaquarkhan/web3-agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.