The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses execFileSync to execute the baw (Binance Agentic Wallet) CLI. This is the primary mechanism for interacting with the user's wallet, querying settings, and signing transactions. User-controlled inputs, such as token addresses, request IDs, and transaction amounts, are passed as arguments to this external binary.
[INDIRECT_PROMPT_INJECTION]: The skill fetches and decodes transaction logs and event data (such as token names and symbols) directly from the BNB Chain. This untrusted external data is passed back to the agent's context, creating an attack surface where a maliciously named token could attempt to influence the agent's instructions.
Ingestion points: chain.js fetches event logs (e.g., Created event) via the viem library's decodeEventLog function.
Boundary markers: The skill does not use explicit delimiters or specific 'ignore instructions' warnings when presenting decoded blockchain data to the agent.
Capability inventory: The skill has the ability to execute shell commands (via the baw CLI) and perform network operations through its blockchain RPC client.
Sanitization: There is no evidence of filtering or sanitization of string-based metadata (like token names) retrieved from the blockchain.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of the gang CLI from the author's GitHub repository (github:gangfun/cli) and the @binance/agentic-wallet package from the Binance registry. These external tools are necessary for the skill's operation.
[DYNAMIC_EXECUTION]: The skill relies on external binaries (baw and gang) installed on the host system. It dynamically constructs and executes commands to perform blockchain operations and wallet management.

gang