bridge-stablecoin
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install several Node.js packages under the
@circle-finscope, which are official SDKs provided by the service vendor. - [CREDENTIALS_UNSAFE]: The instructions list sensitive environment variables such as
PRIVATE_KEY,CIRCLE_API_KEY, andCIRCLE_ENTITY_SECRET. However, the skill explicitly enforces security rules against hardcoding these values, instructing users to use environment variables or secret managers and to add.envfiles to.gitignore. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing user-supplied bridging parameters which represents a potential injection surface.
- Ingestion points: User-provided inputs for source/destination chains, recipient addresses, and transaction amounts (SKILL.md).
- Boundary markers: The instructions include explicit rules to validate all inputs and mandatory prompts for user confirmation before proceeding.
- Capability inventory: The skill utilizes the
kit.bridge()function to execute on-chain financial operations. - Sanitization: The skill mandates the use of exported SDK types and rigorous input validation to mitigate malformed or malicious data processing.
Audit Metadata