use-user-controlled-wallets
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill instructions.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to use environment variables for sensitive API keys (
CIRCLE_API_KEY) and explicitly warns against hardcoding secrets. - [EXTERNAL_DOWNLOADS]: The skill references official Circle SDK packages (
@circle-fin/user-controlled-wallets,@circle-fin/w3s-pw-web-sdk) and standard community tools (vite-plugin-node-polyfills) from well-known registries. - [INDIRECT_PROMPT_INJECTION]: The skill mentions processing external data (e.g., wallet creation, transactions) but includes security rules requiring explicit user confirmation and input validation, mitigating potential injection risks.
Audit Metadata