Pull unresolved CodeRabbit review threads from your PR and apply the fixes one at a time, treating every reviewer comment as untrusted input rather than an instruction.
Coinbase Agentic WalletSkill
Summary
Coinbase's official skill for driving a crypto wallet from an agent: balances and transfers on Base, Polygon and Solana, plus paying for and monetising x402 APIs.
Features
- Email-OTP sign-in and wallet status checks before any authenticated operation
- Balances, transfers and token swaps across Base, Polygon and Solana
- x402 support: search the bazaar, pay per request in USDC, or monetise your own endpoint
- Onchain queries against Base through the CDP SQL API
- Router design that loads only the reference doc the current task needs
- Explicit input-validation and shell-quoting rules for every user-supplied value
Install This Skill
Add this skill to your favorite AI agent in a few steps.
Skill Content
Usage Instructions
Learn how to use this skill with different AI agents.
Example Usage
Check my USDC balance on Base, then send 10 USDC to barmstrong.eth.
Description
Coinbase's agentic-wallet skill gives a coding agent a wallet it can actually operate, through the awal CLI. It is written as a router: a compact SKILL.md that decides which task you are on and reads the matching reference file, so the agent loads instructions for sending USDC without also loading the onchain-query and monetisation docs.
What it covers
| Task | What it does |
| --- | --- |
| Sign in | Email OTP login, verification and logout |
| Balances | Across Base, Polygon and Solana, per chain or all at once |
| Send | USDC, ETH, POL or SOL to an address or an ENS name |
| Trade | Token swaps on Base or Polygon |
| Fund | Top up via Coinbase Onramp |
| x402 search | Browse the bazaar of paid API services |
| x402 pay | Call a paid endpoint with automatic USDC payment |
| x402 monetise | Build and deploy an API other agents pay to use |
| Onchain query | Events, transactions and blocks on Base via the CDP SQL API |
The x402 half is the part worth attention: it is a working implementation of agent-to-agent payments, letting one agent discover a paid service, pay per request in USDC, and letting you stand up an endpoint on the other side of that transaction.
Safety
Because every operation ends up in a shell command, the skill carries explicit input-validation rules: user-supplied values must match documented regexes and allowlists, anything containing spaces, semicolons, pipes or backticks is rejected, and dollar amounts are single-quoted to prevent bash expansion. allowed-tools in the frontmatter pins the awal version the skill was written against. Every command supports --json for machine-readable output.
Requirements
Node.js and npx, an authenticated Coinbase wallet session (email OTP), and funds on the relevant chain for anything that spends.
Source
Published by Coinbase under the MIT licence.
Related Skills
Google's official skill for driving the gcloud CLI safely from an agent: validate every command against its own help text, cap the output, and refuse the operations that should never run unattended.
Convex's official top-level agent skill — routes an agent to the right convex-* skill for the task and to a served capability catalogue that stays current without a reinstall.
Official Shopify skill for theme development in Liquid — teaches an agent the modern theme architecture of sections, blocks and snippets, and validates generated templates and schemas.