nad-wallet
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for blockchain identity management. It explicitly warns against storing private keys in plain text and recommends using environment variables.
- [SAFE]: File system operations in
create-wallet.jsandnadmail-register.jsuse restricted permissions (0o600for wallet/token files and0o700for directories), preventing unauthorized local access to sensitive data. - [SAFE]: Network activity is restricted to legitimate ecosystem endpoints, including the official Monad RPC (
https://rpc.monad.xyz) and the NadMail API (https://api.nadmail.ai) for SIWE authentication. - [SAFE]: The registration process in
nadmail-register.jscorrectly uses cryptographic signatures to prove identity to the NadMail service without ever exposing the wallet's private key to the network.
Audit Metadata