walletconnect-agent

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The skill manages a PRIVATE_KEY provided via environment variables to perform cryptographic operations on blockchain networks. It maintains local operation logs in the user's home directory (~/.walletconnect-agent/ and ~/.basename-agent/). These logs are configured with restricted file permissions and mask sensitive data such as wallet addresses to prevent exposure.
  • [COMMAND_EXECUTION]: The script register-basename.js utilizes Puppeteer for browser automation to navigate dApp interfaces. This involves launching a browser process to facilitate WalletConnect pairings and transaction workflows on the Base network.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known libraries including ethers for blockchain interaction, @walletconnect/web3wallet for dApp connectivity, and puppeteer for web automation.
  • [SAFE]: The skill incorporates multiple security features, such as refusing to accept private keys as command-line arguments to avoid shell history exposure, blocking the dangerous eth_sign method by default, and offering an --interactive mode for manual transaction confirmation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 11:03 PM