skill-01-wallet-management

name	skill-01-wallet-management
description	Manages Web3 wallets including HD derivation, ERC-4337 account abstraction, multi-sig (Safe), and social recovery. Use when creating wallets, signing transactions, managing keys, or configuring smart accounts.
metadata	{"phase":1,"chains":"ethereum,polygon,arbitrum,base,optimism,avalanche,bnb"}

Wallet Management

When to Use

• Creating or importing HD wallets (BIP-39/BIP-44)
• Configuring ERC-4337 smart accounts (bundlers, paymasters)
• Setting up Gnosis Safe or multi-sig workflows
• Implementing social recovery or session keys
• Managing wallet connections (WalletConnect, EIP-6963)

Prerequisites

• MCP: blockchain-rpc-server for chain reads
• MCP: compliance-screening-server before sending to external addresses
• Apply all rules in guardrails/web3-guardrails.yaml

Workflow

1. Wallet Type Selection

Use Case	Recommendation
Single user EOA	HD wallet (MetaMask-compatible path m/44'/60'/0'/0/n)
Team treasury	Gnosis Safe multi-sig
Gasless UX	ERC-4337 smart account + paymaster
High-frequency trading	Session keys with spending limits

2. HD Wallet Derivation

Ethereum path: m/44'/60'/0'/0/{index}
Solana path:   m/44'/501'/{index}'/0'

Use references/hd-paths.md for all supported chains. Never log or persist mnemonic phrases.

3. ERC-4337 Account Abstraction

1. Deploy or connect to existing smart account (SimpleAccount, Kernel, Safe4337)
2. Configure entry point: 0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789 (v0.6)
3. Select bundler URL (Pimlico, Alchemy, Stackup)
4. Optional: configure paymaster for sponsored gas

4. Multi-Sig (Safe)

1. Create Safe with threshold M-of-N
2. Add owners via createProxyWithNonce
3. Propose transactions via Safe Transaction Service API
4. Collect signatures off-chain, execute on-chain

5. Pre-Execution Checks

• Simulate transaction via eth_call or Tenderly
• Screen recipient via compliance MCP
• Verify chain ID matches intended network
• Confirm value ≤ $10,000 or obtain user confirmation

Key Security Rules

• NEVER output, store, or transmit private keys or seed phrases
• Use hardware wallets or secure enclaves for mainnet signing
• Rotate session keys regularly; set expiry and spending caps
• Prefer read-only RPC for balance queries

References

• references/hd-paths.md — BIP-44 paths per chain
• references/erc4337-setup.md — Smart account configuration
• knowledge-base/chains/ — Per-chain RPC and explorer URLs