koios-agent-wallet
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs blockchain operations by executing local Node.js scripts provided within the skill package, such as
agent-wallet.jsfor transaction management andgenerate-key-based-wallet.jsfor keypair creation. - [INDIRECT_PROMPT_INJECTION]: The skill includes a 'sign-submit' capability that processes transaction data (CBOR hex) which may originate from external dApp builders or user-provided sources.
- Ingestion points: The
scripts/agent-wallet.jsscript reads unsigned transaction data from theTX_CBOR_HEXenvironment variable or a file path provided inTX_FILE. - Boundary markers: No specific boundary markers are employed for the raw transaction hex, as it is treated as structured binary data.
- Capability inventory: The skill has the capability to sign transactions using payment and stake keys and submit them to the Cardano network via the Koios provider.
- Sanitization: The input is hex-decoded and parsed using the
@emurgo/cardano-serialization-lib-nodejslibrary, which validates the structure of the transaction before signing or submission.
Audit Metadata