domains / families / business / mandate

mandate

separate

Use when enforcing spend limits on AI agent wallets, validating transactions before signing, configuring allowlists or approval workflows, detecting prompt injection in agent reasoning, scanning codebases for unprotected wallet calls, or auditing agent transaction history. Works with OpenClaw, Claude Code, GOAT, AgentKit, ElizaOS. Supports Bankr, Locus, Sponge, CDP wallets. Non-custodial: private keys never leave your machine.

When to use

• enforcing spend limits on AI agent wallets
• validating transactions before signing
• configuring allowlists or approval workflows
• detecting prompt injection in agent reasoning
• scanning codebases for unprotected wallet calls
• auditing agent transaction history
• intercepting financial tool calls via hooks
• registering agents and activating EVM addresses

When not to use

• executing transactions without validation
• falling back to direct wallet calls if validation is unreachable
• skipping validation for custodial wallets
• using private keys off-machine

Skill page

Source