monolith_skill

This skill securely manages crypto wallet operations for AI agents by using hardware-isolated keys and policy-driven approvals.

Python

2.5k

GitHub Stars

4

Bundled Files

2 months ago

Catalog Refreshed

4 months ago

First Indexed

Readme & install

Copy the install command, review bundled files from the catalogue, and read any extended description pulled from the listing source.

Installation

Preview and clipboard use veilstrat where the catalogue uses aiagentskills.

npx veilstrat add skill openclaw/skills --skill monolith

_meta.json820 B
package-lock.json6.8 KB
package.json864 B
SKILL.md6.0 KB

Overview

This skill is a secure crypto wallet agent designed for macOS agents that need safe, auditable on-chain spending. It uses hardware-isolated keys (Apple Secure Enclave), an ERC-4337 smart wallet, and a default-deny policy engine to prevent accidental or malicious transfers. Built-in on-chain spending caps, an allowlist, and an approval flow give human-in-the-loop control when required.

How this skill works

The skill builds unsigned transaction intents ({target, calldata, value}) and delegates signing and policy enforcement to a local daemon. The daemon enforces per-tx and daily caps, allowlists, unknown-calldata blocking, and requires explicit approval (Touch ID or 8-digit code) for restricted actions. Within-policy operations (ETH/USDC transfers, approved DEX swaps, allowlisted DeFi ops) can run on autopilot; anything outside policy returns an approval request the agent must present to the user.

When to use it

Let agents send ETH or USDC within guarded limits to known recipients.
Enable automated swaps on allowlisted DEXes (Uniswap) while preserving approval controls.
Run balance checks, decode transaction calldata, and query wallet/daemon status.
Initiate emergency freeze (panic) if a compromise is suspected.
Audit agent activity with the daemon audit-log for compliance and incident review.

Best practices

Keep the local Monolith daemon and companion app running on macOS for signing and policy enforcement.
Configure strict allowlists and conservative per-tx/daily caps before funding the wallet.
Require Touch ID for policy updates and allowlist changes to prevent silent policy tampering.
Treat token approvals (approve/permit) as high-risk and require explicit manual approval every time.
Monitor on-chain gas and fund the wallet to avoid daemon refusals due to low ETH.

Example use cases

An agent pays invoices in USDC to pre-approved vendor addresses under a daily budget.
Automated portfolio rebalancing: small Uniswap swaps on autopilot within slippage limits.
A human reviews and authorizes a large transfer that exceeds per-tx cap via the 8-digit approval flow.
Decode a complex contract calldata to present a readable summary to a user before approval.
Freeze the wallet immediately using panic when suspicious outbound activity is detected.

FAQ

Signing commands fail with a clear error; read-only queries still work if they don't require the daemon.

Are private keys ever exposed to the skill or network?

No. Keys are stored in the Apple Secure Enclave and never leave the device; the skill only builds intents.

How does the approval flow work?

The daemon returns an approval request with a summary and expiration. The agent shows that to the user, who enters the 8-digit code from the native dialog, and the agent re-submits the intent with the code to complete signing.

Which chains are supported?

Ethereum Mainnet (chainId 1) and Base (chainId 8453).