fund-agent-wallet
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from CLI outputs and user-provided inputs to construct and execute subsequent shell commands.
- Ingestion points: Data is ingested from the output of
circle wallet list,circle wallet balance, andcircle gateway balance(SKILL.md, references/fiat-on-ramp.md, references/gateway-eco-deposit.md). - Capability inventory: The skill possesses extensive command execution capabilities via the
Bashtool, includingcircle wallet fund,circle gateway deposit, andcircle bridge transfer(SKILL.md). - Boundary markers: The instructions mandate that the agent must confirm the funding method and amount with the user before execution, which serves as a manual checkpoint (SKILL.md).
- Sanitization: The skill depends on the internal argument parsing and validation of the
circleCLI to sanitize inputs interpolated into commands. - [COMMAND_EXECUTION]: The skill's primary functionality is implemented through the execution of shell commands using the
circleCLI tool. - Evidence: The
allowed-toolsconfiguration inSKILL.mdexplicitly permits various subcommands of thecircleCLI. - Scope: Execution is scoped to the
circlebinary, which is used for wallet status, balance checks, funding, and transfers.
Audit Metadata