stellar-verifiable-credentials
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of documentation, code examples, and reference guides. It does not ship with any runnable scripts or automation hooks that could be executed by an AI agent independently.
- [COMMAND_EXECUTION]: While the skill documents various shell commands (e.g.,
curl,npm install) and contains example scripts (examples/api-curl.sh), these are provided for developer reference only. There are no mechanisms for the skill to trigger these commands autonomously. - [EXTERNAL_DOWNLOADS]: The skill references official vendor resources, including the
@acta-team/credentialspackage and ACTA API endpoints (api.testnet.acta.build,api.mainnet.acta.build). These references are necessary for the skill's stated purpose and originate from the author's controlled infrastructure. - [CREDENTIALS_UNSAFE]: Security best practices are followed for credential management. The skill instructs users to provide API keys via environment variables (e.g.,
NEXT_PUBLIC_ACTA_API_KEY) or theX-ACTA-Keyheader, and explicitly warns against hardcoding secrets or exposing private keys.
Audit Metadata