MetaMask / MetaMask/agent-skills

Proposal: add deployment-profile workflow for agent authority setup

Open
#17 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
7
Forks
14
Avg merge
1d 21h
Merged PRs (30d)
5

Description

MetaMask Agent Wallet already exposes the right primitives for bounded autonomy: wallet modes, trading mode, wallet policy, request polling, swaps, perps, prediction markets, and transaction/security checks.

The missing developer-facing piece I would suggest for this skills repo is a **deployment-profile workflow** that agents run before using the higher-authority action skills.

The goal is to make the authority surface explicit before the capability surface is used.

A profile workflow could help the agent/operator answer:

- Which wallet mode is being used?
- Which trading mode is active: Guard Mode or Beast Mode?
- What are the current spend limits, allowlisted protocols, and risk settings?
- Which actions are autonomous vs human-approved?
- Which actions should always emit a receipt or post-action summary?
- How does the operator revoke/reduce authority after a session?

Concrete shape for this repo:

1. Add a workflow such as `workflows/deployment-profile.md`.
2. Route it from both `metamask-agent-wallet` and `metamask-agent-workflows`.
3. Have the workflow call/read:
- `mm init show`
- `mm wallet trading-mode get`
- `mm wallet policy get`
- relevant request/polling commands for pending approvals
4. End with a compact profile summary before any swap/perps/predict workflow runs.

Example profile names:

- read-only
- testnet/demo
- capped trading
- mainnet human approval
- bounded autonomy
- explicit full autonomy

I wrote up the broader deployment-profile proposal here, using Coinbase AgentKit as a public-code case study:

https://lumenftf.com/blog/wallet-enabled-agents-need-deployment-profiles.html

This is not a security vulnerability report and not a claim that MetaMask Agent Wallet lacks controls. The point is narrower: policy should travel with capability, and agent-facing skills are a good place to make that policy visible before the agent starts moving value.

If this direction fits, I would be happy to draft a small docs/skills PR for the workflow shape.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the existing metamask-agent-wallet and metamask-agent-workflows entry points, then review how workflows are organized before adding workflows/deployment-profile.md. Check the documented commands mm init show, mm wallet trading-mode get, mm wallet policy get, and request/polling commands. Done means both skills route to the workflow and it produces a compact authority profile before swap, perps, or prediction workflows run.

Written by the indexing model from the issue text.

Assessment

Tech stack
cli
Domain
cli, documentation, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.