wallet-integration

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official GitHub repository for the @dfinity/oisy-wallet-signer project for testing and development purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an interface for processing transaction consent messages (ICRC-21) provided by external canisters. It includes security guidance for developers to distinguish between canister-verified messages and signer-generated fallbacks in the user interface to prevent user deception.
  • [SAFE]: The skill utilizes standard, well-documented protocols for blockchain wallet interaction, emphasizing explicit user approval and per-action confirmation popups. No malicious behaviors such as credential theft, obfuscation, or unauthorized network activity were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:04 PM
Security Audit — agent-trust-hub — wallet-integration