use-modular-wallets
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing users to use environment variables (
CLIENT_KEY,CLIENT_URL) and provides explicit warnings against hardcoding credentials, mnemonic phrases, or passkeys in source code. - [SAFE]: External dependencies are limited to official Circle packages (
@circle-fin/modular-wallets-core) and industry-standard cryptographic libraries (viem,bip39), which are appropriate for the skill's stated purpose. - [SAFE]: The skill mandates protective measures for sensitive operations, requiring explicit human-in-the-loop confirmation for all blockchain transactions, destination addresses, and mainnet interactions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied parameters for wallet operations. However, it mitigates potential injection risks by including strict rules for input validation and requiring user verification before any state-changing actions are executed.
- [SAFE]: Documentation and resource links point to well-known, official domains (
circle.com) and established developer repositories, conforming to the expected infrastructure for this vendor.
Audit Metadata