skills/circlefin/skills/bridge-tokens/Gen Agent Trust Hub

bridge-tokens

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install official SDK packages from the vendor (Circle), including @circle-fin/app-kit, @circle-fin/bridge-kit, and associated blockchain adapters. These are recognized vendor resources.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as wallet addresses, chain names, and token identifiers. To mitigate risks associated with untrusted data, the instructions include mandatory requirements for input validation and explicit user confirmation before executing any bridge operations.
  • [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill follows industry standards for secure credential management by instructing users to use environment variables and avoid hardcoding secrets. All external dependencies are verified SDKs related to the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 05:07 PM