扫描报告
5 /100
walletchan
Interact with web3 dapps using the WalletChan browser extension via Chrome CDP
WalletChan is a legitimate browser automation skill for web3 dapp interaction via Chrome CDP. It contains only documentation with no executable code, explicitly warns against sharing the Master Password, and requires only an Agent Password with limited scope.
可以安装
This skill is safe to use. Users should ensure they never share their Master Password and only provide the Agent Password for wallet unlock and transaction confirmation.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in documentation |
| 网络访问 | NONE | NONE | — | CDP is local browser control only |
| 命令执行 | NONE | NONE | — | No shell commands documented |
| 浏览器 | READ | READ | ✓ 一致 | CDP tab control and page content reading documented |
2 项发现
中危 外部 URL 外部 URL
https://walletchan.com/ SKILL.md:8 中危 外部 URL 外部 URL
https://chromewebstore.google.com/detail/walletchan/kofbkhbkfhiollbhjkbebajngppmpbgc SKILL.md:13 目录结构
1 文件 · 6.0 KB · 119 行 Markdown 1f · 119L
└─
SKILL.md
Markdown
安全亮点
✓ Clear distinction between Agent Password and Master Password with explicit warnings
✓ Agent Password scoped to limited operations (unlock, review, confirm) - cannot export private keys
✓ Emphasis on transaction verification before confirmation
✓ No executable code - purely documentation/guidance
✓ Explicit warnings about auto-lock and security best practices
✓ Guidance to never assume success and always verify state changes