cardano-cli-wallets
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a wrapper script (
scripts/cardano-cli.sh) intended to facilitate the execution of Cardano CLI commands. It includes instructions for the agent to prepare the script for use by modifying its execution bit. - [EXTERNAL_DOWNLOADS]: The included wrapper script is configured to download and run Docker images from the official Intersect MBO (Cardano) repository at
ghcr.io/intersectmbo/cardano-node. This is the standard distribution channel for Cardano node software. - [DYNAMIC_EXECUTION]: The utility script uses shell argument forwarding (
$@) to pass user-defined parameters directly to the cardano-cli tool. This allows for flexible command execution while maintaining the context of the local working directory via Docker mounts. - [PRIVILEGE_ESCALATION]: The documentation instructs the agent to use
chmod +xto enable the utility script and recommends usingchmod 600to secure generated signing keys (.skeyfiles), which aligns with standard security practices for sensitive cryptographic material.
Audit Metadata