agentic-wallet
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to facilitate cryptocurrency operations such as checking balances, sending tokens, and trading, as well as monetizing APIs via the x402 protocol. All operations are performed using the
awalCLI, an official tool associated with the vendor. - [COMMAND_EXECUTION]: The skill relies on shell commands to interact with the wallet CLI. To prevent potential command injection, the instructions include comprehensive 'Input Validation' sections in every reference file, providing specific regex patterns and rules to sanitize user-provided values (e.g., email addresses, OTPs, wallet addresses, and SQL queries) before they are used in commands.
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and run theawalpackage and provides instructions for setting up Node.js projects with official@x402and@coinbaselibraries. These are recognized vendor resources and part of the skill's core functionality. - [REMOTE_CODE_EXECUTION]: The use of
npx awal@2.10.0involves downloading and executing code from the NPM registry. This is documented as the standard mechanism for using the wallet CLI.
Audit Metadata