Coinfello, an AI agent platform, released an open-source skill that enables AI agents to connect to MetaMask and execute onchain transactions without handling users' private keys.
According to a recent report by The Defiant, the skill supports MaltBot, a personal AI agent based on OpenClaw, allowing it to trade specified amounts of cryptocurrency from an existing MetaMask wallet. In the process, the wallet owner does not need to hand over custody of private keys.
The skill is built on the MetaMask Smart Account Kit, using ERC-4337 smart accounts and an ERC-7710 delegation method.
Coinfello said it focused on addressing areas where current AI agent wallets are vulnerable in relation to the skill.
Most agent wallets operate by handing private keys or API credentials directly to the agent. In that case, they can be exposed to prompt injection attacks. Coinfello explained it solved the problem by granting the agent only the minimum permissions needed for specific tasks.
Coinfello Chief Technology Officer Brett Cleary (브렛 클리어리) said, "For agents to participate meaningfully in the onchain economy, we need a better security model than handing private keys to autonomous systems."