bnbagent-studio
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses read-only commands like
bag --versionandls app/agent/studio.tomlvia dynamic context injection (!) for benign pre-flight environment checks to ensure necessary project files are present before proceeding. - [SAFE]: Sensitive data management is handled through secure patterns, including gitignored local environment files (
.studio/.env.local) and delegated secret channels for cloud deployments like AWS Secrets Manager, Azure CustomKeys, and NodeOps runtime variables, ensuring credentials never enter source code or artifacts. - [SAFE]: External network operations are targeted at trusted organizations or well-known services, including official BNB Chain API endpoints, Binance Bazaar, and CoinMarketCap for market data fetching.
- [SAFE]: The skill implements a feedback mechanism (
bag feedback) that includes automated redaction of sensitive identifiers, credentials, and transaction hashes before local report generation for user review. - [SAFE]: Dependency management uses pinned versions and reputable registries for vendor-owned and well-known libraries like the BNB Agent SDK and AWS/Azure deployment tools, ensuring stability and reducing supply chain risk.
Audit Metadata