meshjs-cardano
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill explicitly instructs the agent to never request seed phrases or private keys, adhering to fundamental security principles for cryptocurrency applications.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install standard, official libraries (
@meshsdk/coreand@meshsdk/react) from established package registries. - [INDIRECT_PROMPT_INJECTION]: The skill includes code generation examples based on user requests (e.g., 'Mint an NFT with MeshJS'). While it lacks explicit boundary markers or instructions to ignore embedded prompts within user input, this risk is inherent to its primary purpose as a development template library. Capability is limited to file operations within the scoped environment.
Audit Metadata