Is Bitget Wallet Skill safe to connect to an AI agent?
Approval is optional. Safety 55%
What an AI agent can do
- Live vs paper: live; no testnet mentioned source
- Order approval: keys either come from a mnemonic in local secure storage (derived per operation, never persisted) or are signed in the Bitget Wallet TEE after social login; swaps never sign autonomously and the skill asks for your confirmation before every fund-moving action (in the agent's chat); the x402 payment example uses an --auto flag; pre-swap token risk check source
- Markets: swaps and bridges on Ethereum, Solana, BNB Chain, Base, Arbitrum, Tron and more, gasless transfers, x402 payments
- Pricing: not stated
Safeguards that exist
- Human approval: Prompt-level: the skill asks for your confirmation in chat before every fund-moving action and swaps never sign autonomously; the x402 payment example uses an --auto flag (official docs) source
- Guardrails outside the agent: Approval/confirmation step documented source
- Test before real money: Pre-swap token risk check (some actions only) (official docs) source
- Who holds the keys: With social login, transactions are signed in the Bitget Wallet TEE and no private key is kept locally (the other mode keeps a mnemonic on the agent's machine) (official docs) source
- Open source or audited: Open source (MIT); no audit report found (official docs) source
- Incident record (last 12 months): No incident naming this tool in our incident tracker in the last 12 months source
Safeguards that are missing
- Sending funds out: Skill holds the wallet mnemonic and supports direct transfers to any address; no allowlist exists (a risk rule engine is only planned) (official docs) source
Safety score
| Input | From official docs or our listing | Points |
|---|---|---|
| Human approval | Prompt-level: the skill asks for your confirmation in chat before every fund-moving action and swaps never sign autonomously; the x402 payment example uses an --auto flag (official docs) source | 10 / 25 |
| Guardrails outside the agent | Approval/confirmation step documented | 15 / 15 |
| Test before real money | Pre-swap token risk check (some actions only) (official docs) source | 5 / 15 |
| Sending funds out | Skill holds the wallet mnemonic and supports direct transfers to any address; no allowlist exists (a risk rule engine is only planned) (official docs) source | 0 / 15 |
| Who holds the keys | With social login, transactions are signed in the Bitget Wallet TEE and no private key is kept locally (the other mode keeps a mnemonic on the agent's machine) (official docs) source | 5 / 10 |
| Open source or audited | Open source (MIT); no audit report found (official docs) source | 10 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker in the last 12 months (incident tracker) | 10 / 10 |
| Total | 55% of the points we could check | 55 / 100 |
Sources
Full listing: Bitget Wallet Skill · How the score works: Safety score method