- Home
- Skills
- Web3 & Crypto
- Crypto Wallet Permission Auditor
Works with the AI Agents you already use
Crypto Wallet Permission Auditor
Audit Web3 wallet approvals to identify high-risk spenders and prepare remediation reports.
$19.99
Crypto Wallet Permission Auditor
Example session with this skill installed
Audit these Ethereum approvals for wallet 0x742d35Cc6634C0532925a3b844Bc454e4438f44e. Spender 0xDef1C0... has unlimited USDC allowance. Spender 0x111111... has 500 DAI.
- Read your context and instructions
- Compiled the crypto wallet permission
I have audited the provided approvals for wallet 0x742d35Cc6634C0532925a3b844Bc454e4438f44e on Ethereum Mainnet. The analysis focused on spender identity, allowance scale, and contract verification status.
Wallet Permission Audit Report
| Token | Spender Address | Spender Name | Allowance | Risk Level | Logic/Evidence |
|---|---|---|---|---|---|
| USDC | 0xDef1C0... | 0x Protocol | Unlimited | Medium | Official 0x: Exchange Proxy. Unlimited is standard for UX but increases surface area. |
| DAI | 0x111111... | 1inch v6 | 500.00 | Low | Official 1inch Aggregator. Specific limit set; contract is verified and widely used. |
| USDT | 0xEBb6e7... | Unknown | Unlimited | Critical | No verified source code found. Address not linked to major protocols. High drain risk. |
Contract Verification Checks
- 0x Protocol (0xDef1C0): Verified Source, Official Address Match, Proxy (Transparent).
- 1inch v6 (0x111111): Verified Source, Official Address Match, Immutable.
- Unknown (0xEBb6e7): Unverified, No Match, Unknown Architecture.
Remediation & Revocation Guidance
Prioritize revoking the Unknown Spender (0xEBb6e7) immediately as it lacks transparency and official association.
- Navigate to a trusted revocation tool (e.g., Etherscan Token Approval tool or Revoke.cash).
- Connect your wallet and ensure you are on the Ethereum Mainnet.
- Locate the USDT entry for spender
0xEBb6e7.... - Initiate the
revokeorsetAllowance(0)transaction and verify the gas fee.
Next steps
- Revoke the Unknown Spender permission for USDT.
- Monitor the transaction on Etherscan to confirm the allowance is updated to zero.
- Re-run this audit if you interact with new experimental yield aggregators.
Connects securely to your tools. The creator never sees your data.
About this skill
DeFi wallet approvals often linger long after a swap, leaving users exposed to protocol hacks or malicious spenders. This skill audits public wallet addresses to inventory token allowances and prepare evidence-based remediation reports.
What it does
- Inventory approvals by mapping tokens, spenders, and allowance amounts from provided data sources.
- Flag exposure by identifying unlimited approvals that exceed standard safety thresholds.
- Verify spenders by checking contract addresses against official protocol references and proxy status.
- Risk classification by triaging findings into Critical to Informational categories based on evidence.
- Remediation planning by generating prioritized revocation steps and post-transaction checklists.
How it works
- Provide the public wallet address, blockchain network, and your approval data export or source.
- The agent analyzes the spender contracts for verification status and upgradeability.
- Review the ranked risk report identifying high-exposure or unknown spender contracts.
- Follow the provided revocation guidance and post-revocation verification steps.
Frameworks & tools
Works with Ethereum, L2s, and EVM-compatible chains. Uses data from block explorers, official protocol documentation, and contract verification registries.
Why this beats prompting it yourself
Generic prompts often miss the distinction between unlimited approvals and active threats, leading to panic or oversight. This skill enforces a systematic verification of spender identities and proxy status while maintaining strict safety boundaries around private keys.
Use cases
- Auditing a long-inactive DeFi wallet before depositing new funds.
- Preparing a security report after a protocol exploit is announced.
- Performing routine monthly hygiene checks across multiple EVM chains.
Known limitations
Does not perform live on-chain transactions or automated revocations. Requires manual input of approval data if live API access is unavailable. Risk labels are for triage only.
Requires manual data export or public API access. Cannot perform on-chain signing. Verified source code is not a safety guarantee. Risk labels are for triage, not formal certification.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before any payment.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 21 days ago