emblem-ai-agent-wallet
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@emblemvault/agentwalletCLI tool from npm and provides instructions for cloning from the official GitHub repository. These sources are associated with the skill's authoring organization. - [COMMAND_EXECUTION]: The skill executes the
emblemaiCLI tool to perform wallet operations and includes helper scripts for balance checking and documentation synchronization. No unsafe or unauthorized command execution was detected. - [PROMPT_INJECTION]: The skill provides comprehensive instructions for the agent to identify and mitigate indirect prompt injection from untrusted blockchain data (e.g., malicious token names or transaction memos). It recommends wrapping tool output in explicit delimiters and requires human confirmation for any value-moving actions.
- [CREDENTIALS_UNSAFE]: The skill manages wallet credentials stored locally in
~/.emblemai/. It follows security best practices by implementing restricted file permissions (0600), profile isolation, and explicit warnings against hardcoding secrets or using elevated privileges (sudo).
Audit Metadata