agentic-wallet

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to facilitate cryptocurrency operations such as checking balances, sending tokens, and trading, as well as monetizing APIs via the x402 protocol. All operations are performed using the awal CLI, an official tool associated with the vendor.
  • [COMMAND_EXECUTION]: The skill relies on shell commands to interact with the wallet CLI. To prevent potential command injection, the instructions include comprehensive 'Input Validation' sections in every reference file, providing specific regex patterns and rules to sanitize user-provided values (e.g., email addresses, OTPs, wallet addresses, and SQL queries) before they are used in commands.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and run the awal package and provides instructions for setting up Node.js projects with official @x402 and @coinbase libraries. These are recognized vendor resources and part of the skill's core functionality.
  • [REMOTE_CODE_EXECUTION]: The use of npx awal@2.10.0 involves downloading and executing code from the NPM registry. This is documented as the standard mechanism for using the wallet CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 07:23 AM
Security Audit — agent-trust-hub — agentic-wallet