use-agent-wallet
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
@circle-fin/clipackage via the npm registry. This is the official command-line interface provided by the vendor (Circle) for programmatic wallet management. It uses standard package management instead of untrusted scripts. - [COMMAND_EXECUTION]: The skill uses the
circleCLI to perform operations such as wallet creation, balance inspection, and session management. These are legitimate uses of the tool required for its primary function. - [SAFE]: The skill incorporates significant security and safety guardrails. It explicitly forbids the agent from hardcoding user emails, mandates a two-step OTP process for authentication, and strictly prohibits the agent from accepting the Terms of Use or Privacy Policy on the user's behalf without explicit, verified consent. Furthermore, it instructs the agent to display live URLs for legal documents rather than paraphrasing them, ensuring transparency.
Audit Metadata