Sigil Security

What This Skill Does

The Sigil Security skill provides a robust, multi-layered security framework for AI-controlled ERC-4337 smart wallets. By integrating the Sigil Protocol, this skill ensures that your AI agents operate within strictly defined parameters, mitigating the risks associated with autonomous on-chain activity. Unlike traditional EOA wallets, which represent a single point of failure, Sigil Security utilizes a 3-layer Guardian system (Rules, Simulation, and AI Risk Scoring) to vet every single transaction before it is submitted to the blockchain. Whether you are building an automated trading agent on Arbitrum or a decentralized governance participant on Ethereum, this skill enforces granular policy controls—including whitelist enforcement, spending caps, and velocity limits—without requiring you to give your agent full administrative control over your assets.

Installation

To install this skill, use the ClawHub command line interface: clawhub install openclaw/skills/skills/efe-arv/sigil-security. After installation, ensure you have configured your environment variables in your local .env or project settings. You will need to generate a SIGIL_API_KEY via the Sigil dashboard, define your SIGIL_ACCOUNT_ADDRESS (your deployed smart account), and set your SIGIL_AGENT_SIGNER. Note that the agent signer must be a dedicated EOA key used solely for signing UserOps; never use a primary treasury wallet for this purpose. Once variables are set, the skill will automatically initialize the connection to the Sigil API endpoint at https://api.sigil.codes/v1 upon start-up.

Use Cases

• Automated Yield Farming: Allow your agent to rotate positions across protocols while keeping hard caps on daily spend and restricting interaction to pre-approved smart contract addresses.
• Autonomous Governance: Safely delegate voting power to an agent for decentralized autonomous organizations, ensuring the agent can only interact with specific vote() functions.
• Agentic Treasury Management: Enable an AI assistant to handle small-scale operational expenses or gas management across multiple EVM chains while maintaining a secondary 'Guardian' layer that stops suspicious drain attempts.

Example Prompts

1. "Check my current daily spending limit on the Sigil account for the Base chain and summarize the last 5 validated transactions."
2. "Please execute a swap of 0.1 ETH for USDC on Uniswap using the Sigil smart wallet; verify that the Guardian simulation approves this before signing."
3. "Rotate my agent signer credentials immediately as a precaution, and confirm that the new signing key has been registered on the Sigil dashboard."

Tips & Limitations

• Security Best Practice: Always follow the principle of least privilege. The agent signer is a scoped credential; even if the AI is compromised, it cannot change your security policy, freeze funds, or upgrade the account.
• Financial Hygiene: Never load significant value directly onto the Agent Signer address. Treat it as a 'burner' key meant only for signing operations.
• Limitations: This skill is strictly for EVM-compatible chains. It does not support non-EVM networks like Solana or Bitcoin. Additionally, real-time transaction simulation depends on network RPC availability; latency might vary during periods of high chain congestion.