use-circle-cli
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Orchestrates various
circleCLI commands to manage agent-controlled wallets, execute cross-chain bridging via CCTP, and interact with smart contracts on supported EVM chains.\n- [EXTERNAL_DOWNLOADS]: Facilitates the installation of the@circle-fin/clipackage from the NPM registry and updates specialized skills from the Circle skill catalog hosted on GitHub.\n- [DATA_EXFILTRATION]: Includes a feedback mechanism (circle feedback submit) that transmits user messages and optionally recent command history to Circle's infrastructure for product improvement; however, the skill explicitly mandates local filtering of PII and secrets before transmission.\n- [DYNAMIC_EXECUTION]: Allows for the installation and updating of additional agent capabilities via thecircle skillandnpx skillscommands, enabling the retrieval of new logic from a remote registry.\n- [SAFE_PRACTICES]: Implements strong security guardrails by prohibiting the agent from accepting Terms of Service without explicit user consent and forbidding the storage or logging of sensitive data such as private keys and OTP codes.
Audit Metadata