Skip to content

fix(skill): clarify server-enforced access controls in the skill description - #59

Merged
hieu-w merged 1 commit into
mainfrom
fix/skill-risk-description
Oct 12, 2026
Merged

hieu-w merged 1 commit into
mainfrom
fix/skill-risk-description

Conversation

@hieu-w

@hieu-w hieu-w commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Motivation and Context

The metamask-agent-wallet skill description listed the financial operations an agent can run, but never said that those operations are gated outside the agent. Readers and skill scanners could treat the agent as having unconstrained authority over transfers, swaps, trading, and payments.

Jira Link

N/A

Description

Adds one sentence to the description frontmatter in skills/metamask-agent-wallet/SKILL.md:

Financial operations are protected by server-enforced access controls including MFA approval, configurable wallet policies, and trading-mode guards (guard/beast) that restrict operation scope independently of the agent.

No commands, workflows, or behavior change. The skill still routes the same mm CLI operations; the description now states that MFA, wallet policies, and trading-mode guards (guard / beast) are enforced by the server, not by the agent.

How has this been tested?

Documentation-only change to the skill frontmatter. No commands or tests to run.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

  • My code follows the code style of this project. (run lint)
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • All new and existing tests passed.

This repo has no test suite for skill frontmatter. The change is a single sentence in SKILL.md.

@hieu-w
hieu-w requested a review from a team as a code owner October 12, 2026 04:15
@hieu-w hieu-w changed the title fix: clarify server-enforced access controls fix(skill): clarify server-enforced access controls in the skill description Oct 12, 2026
@hieu-w
hieu-w merged commit c195dcc into main Oct 12, 2026
11 checks passed
@hieu-w
hieu-w deleted the fix/skill-risk-description branch October 12, 2026 04:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants