bitget-wallet
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's production API endpoint at
https://copenapi.bgwapi.ioto fetch real-time market data, perform token security audits, and execute blockchain operations. It also interacts with x402 resource servers as directed by user queries. - [COMMAND_EXECUTION]: The skill provides scripts for signing and broadcasting transactions. It includes
key_utils.py, which implements a secure mechanism to read private keys from temporary files and immediately delete them from the file system, minimizing the risk of credential exposure in shell history or logs. - [SAFE]: Static analysis identified dynamic imports (
importlib.import_module) in several scripts; however, manual review confirms these imports target the skill's own internal modules using static strings, which is a benign implementation choice and poses no security risk. - [SAFE]: The skill implements mandatory 'Human-in-the-Loop' confirmation steps for all fund-moving actions, ensuring that the AI agent cannot sign or broadcast transactions without explicit user approval.
Audit Metadata