cardano-cli-staking-operator
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill metadata contains a shell command (
!cardano-cli version 2>&1 | head -5) intended to check the status of the local Cardano node software at load time. This is a legitimate use of the dynamic context feature for validating the execution environment. - [COMMAND_EXECUTION]: The skill provides structured templates for executing blockchain staking operations. These commands are designed to be manually reviewed and invoked, incorporating standard on-chain transaction practices such as building, signing, and submission.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Although the skill provides instructions for utilizing cryptographic signing keys (e.g., .skey files), their use is restricted to local transaction signing operations. No network patterns or logic for exfiltrating these sensitive keys were found.
Audit Metadata