use-developer-controlled-wallets
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines rigorous security rules that instruct the agent to never hardcode secrets, use environment variables for API keys and entity secrets, and ensure sensitive recovery files are excluded from version control via .gitignore.
- [SAFE]: All external references, including documentation links and the required Node.js package (@circle-fin/developer-controlled-wallets), are official resources belonging to the vendor, Circle.
- [SAFE]: The skill includes mandatory user confirmation steps for sensitive blockchain operations, such as transferring tokens, signing messages, and executing smart contracts, preventing unauthorized autonomous actions.
- [SAFE]: The instructions for storing recovery files in the user's home directory (~/.circle/) are part of the standard, documented recovery mechanism for the Circle SDK and do not involve exfiltration to external third parties.
Audit Metadata