flare-smart-accounts
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
smart-accounts-clifrom the Flare Foundation's official GitHub repository (github.com/flare-foundation/smart-accounts-cli.git). It also references theflare-viem-starterrepository for TypeScript examples. - [COMMAND_EXECUTION]: Provides standard CLI commands for the
smart_accounts.pytool to encode blockchain instructions, bridge transactions to the XRP Ledger (XRPL), and decode protocol messages. These are intended for developer interaction with the platform. - [INDIRECT_PROMPT_INJECTION]: The documentation describes a protocol that processes external data from XRPL payment memos. It correctly identifies the security risk of untrusted external input and provides explicit remediation guidance for developers, including using fixed-length instruction formats and validating data before processing.
- [CREDENTIALS_UNSAFE]: References a
.envfile for storing wallet credentials used by the CLI tool. The skill includes a specific security warning advising users to keep these credentials in secure, user-controlled environments and avoid sharing them.
Audit Metadata