bnbagent-studio

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses read-only commands like bag --version and ls app/agent/studio.toml via dynamic context injection (!) for benign pre-flight environment checks to ensure necessary project files are present before proceeding.
  • [SAFE]: Sensitive data management is handled through secure patterns, including gitignored local environment files (.studio/.env.local) and delegated secret channels for cloud deployments like AWS Secrets Manager, Azure CustomKeys, and NodeOps runtime variables, ensuring credentials never enter source code or artifacts.
  • [SAFE]: External network operations are targeted at trusted organizations or well-known services, including official BNB Chain API endpoints, Binance Bazaar, and CoinMarketCap for market data fetching.
  • [SAFE]: The skill implements a feedback mechanism (bag feedback) that includes automated redaction of sensitive identifiers, credentials, and transaction hashes before local report generation for user review.
  • [SAFE]: Dependency management uses pinned versions and reputable registries for vendor-owned and well-known libraries like the BNB Agent SDK and AWS/Azure deployment tools, ensuring stability and reducing supply chain risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 04:13 AM