cardano-cli-transactions
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill executes a version check command (
cardano-cli version) at load time via the!syntax inSKILL.md. This is used for environment verification and is benign. - [EXTERNAL_DOWNLOADS]: The
cardano-cli.shscript references and downloads the official Cardano node Docker image (ghcr.io/intersectmbo/cardano-node) as a fallback for users who do not have the CLI tool installed locally. This uses a well-known and reputable source within the Cardano community. - [COMMAND_EXECUTION]: The skill provides shell command templates and a wrapper script for interacting with the Cardano blockchain. These operations are essential to the skill's purpose and are documented with security best practices, such as explicit warnings against exposing private signing keys.
- [PRIVILEGE_ESCALATION]: The instructions recommend setting execution permissions (
chmod +x) for the skill's own included shell script (cardano-cli.sh), which is standard procedure for facilitating the use of local utility scripts and does not involve unauthorized privilege elevation.
Audit Metadata