The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The README.md and install.sh files reference a remote installation script located at https://raw.githubusercontent.com/BofAI/skills/main/wallet-cli/install.sh which is executed by piping it to a shell. This script is provided by the skill vendor and handles environment setup and global package installation.
[COMMAND_EXECUTION]: The skill relies on executing the wallet-cli binary and npm commands for checking and managing the tool's installation.
[DYNAMIC_EXECUTION]: The install.sh script utilizes node -e for performing environment checks and version validation logic during the installation process.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the TRON blockchain via the CLI tool. \n
Ingestion points: Data enters the agent context through the stdout of wallet-cli commands (SKILL.md). \n
Boundary markers: The skill mandates the use of JSON output formatting (-o json) to provide structured data for parsing (SKILL.md). \n
Capability inventory: The agent can execute the wallet-cli binary and perform global npm installations with user approval (SKILL.md, install.sh). \n
Sanitization: Instructions specify parsing JSON fields and avoiding floating-point arithmetic for on-chain amounts to prevent data corruption (SKILL.md).
[SAFE]: The skill implements several safety best practices, including explicit prohibitions against collecting secrets (passwords, mnemonics) in chat, requiring non-logging stdin channels for sensitive inputs, and defining a strict confirmation matrix for mainnet transactions.

wallet-cli