koios-agent-wallet

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs blockchain operations by executing local Node.js scripts provided within the skill package, such as agent-wallet.js for transaction management and generate-key-based-wallet.js for keypair creation.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes a 'sign-submit' capability that processes transaction data (CBOR hex) which may originate from external dApp builders or user-provided sources.
  • Ingestion points: The scripts/agent-wallet.js script reads unsigned transaction data from the TX_CBOR_HEX environment variable or a file path provided in TX_FILE.
  • Boundary markers: No specific boundary markers are employed for the raw transaction hex, as it is treated as structured binary data.
  • Capability inventory: The skill has the capability to sign transactions using payment and stake keys and submit them to the Cardano network via the Koios provider.
  • Sanitization: The input is hex-decoded and parsed using the @emurgo/cardano-serialization-lib-nodejs library, which validates the structure of the transaction before signing or submission.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 11:09 PM