walletconnect-agent
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill manages a
PRIVATE_KEYprovided via environment variables to perform cryptographic operations on blockchain networks. It maintains local operation logs in the user's home directory (~/.walletconnect-agent/and~/.basename-agent/). These logs are configured with restricted file permissions and mask sensitive data such as wallet addresses to prevent exposure. - [COMMAND_EXECUTION]: The script
register-basename.jsutilizes Puppeteer for browser automation to navigate dApp interfaces. This involves launching a browser process to facilitate WalletConnect pairings and transaction workflows on the Base network. - [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known libraries including
ethersfor blockchain interaction,@walletconnect/web3walletfor dApp connectivity, andpuppeteerfor web automation. - [SAFE]: The skill incorporates multiple security features, such as refusing to accept private keys as command-line arguments to avoid shell history exposure, blocking the dangerous
eth_signmethod by default, and offering an--interactivemode for manual transaction confirmation.
Audit Metadata