algokit-utils-py

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation of official libraries such as algokit-utils, algokit-crypto, and algokit-common via standard package managers. These are verified resources provided by the developer community for Algorand integration.\n- [COMMAND_EXECUTION]: The documentation includes instructions for standard development workflows, such as starting a local blockchain instance with algokit localnet start. These commands are standard for the intended development use case.\n- [DATA_EXFILTRATION]: In references/ed25519.md, a code example demonstrates implementing a custom signer using the httpx library to send data to a remote signing service (e.g., a private KMS or HSM). This is presented as an architectural pattern for secure remote signing and does not constitute unauthorized data exfiltration.\n- [CREDENTIALS_SAFE]: The skill actively encourages security best practices by advising against hardcoding mnemonics and suggesting the use of environment variables or secret managers. It also details a 'wrapped secrets' pattern designed to ensure that private key material is zeroed out in memory immediately after a signing operation is completed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 11:41 AM
Security Audit — agent-trust-hub — algokit-utils-py