use-modular-wallets
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches dependencies including @circle-fin/modular-wallets-core, viem, and bip39 from official package registries. It also references reference implementations from the vendor's official GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data such as usernames, recipient addresses, and recovery mnemonics (Ingestion points: SKILL.md, references/circle-smart-account.md, references/passkey-recovery.md). It lacks explicit boundary markers for user-supplied strings. Capability inventory includes executing blockchain transactions and recovery operations via the bundler client. The skill mitigates risk by instructing the agent to validate all inputs and obtain explicit user confirmation before executing any blockchain transactions (Sanitization).
Audit Metadata