use-developer-controlled-wallets
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for secret management by explicitly instructing the agent to use environment variables (
CIRCLE_API_KEY,ENTITY_SECRET) and to refuse requests to hardcode or log sensitive credentials. - [EXTERNAL_DOWNLOADS]: The skill utilizes the official
@circle-fin/developer-controlled-walletsNode.js package. This is a legitimate dependency for the stated purpose of managing Circle wallets. - [COMMAND_EXECUTION]: The skill provides standard installation commands and SDK initialization snippets that are consistent with official documentation for the service.
- [INDIRECT_PROMPT_INJECTION]: The skill minimizes risks associated with processing external blockchain data by enforcing strict security rules, such as requiring explicit user confirmation for all transfers and message signing, and performing input validation before submission.
Audit Metadata