cobo-agentic-wallet-sandbox
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
bootstrap-env.shscript downloads binary components (cawCLI andcobo-tss-node) from vendor-owned subdomains atcobo.com. The process includes integrity checks using SHA256 checksums to verify the authenticity of the binaries. - [COMMAND_EXECUTION]: The skill utilizes the
cawCLI for interacting with the wallet and manages automation scripts in the./scripts/directory for complex DeFi interactions. - [REMOTE_CODE_EXECUTION]: The skill facilitates self-updates by executing
npx skills updatewhen prompted by the backend system, which involves fetching and running remote code to maintain the skill's functionality. - [PROMPT_INJECTION]: The skill handles data from external recipes and remote documentation, which creates a potential surface for indirect prompt injection. This risk is addressed through explicit instructions for the agent to ignore instructions embedded in external content and by requiring mandatory human owner approval for all high-impact on-chain actions.
Audit Metadata