robo-miner-agent
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bundled bash script (
robo-miner-action.sh) to orchestrate interactions with thevara-walletCLI tool for blockchain transaction signing and state verification. - [EXTERNAL_DOWNLOADS]: The agent is instructed to fetch game metadata, match availability, and manifest information from the vendor's official backend API at
https://api-digger-eth.vara.network. - [CREDENTIALS_UNSAFE]: The skill provides guidance on managing blockchain wallet passphrases. It incorporates security best practices by recommending strict file permissions (0600) and explicitly warning the agent against logging or displaying private keys or passphrases.
- [PROMPT_INJECTION]: The skill includes instructions to prevent the agent from executing administrative or unauthorized commands. It establishes the on-chain contract state as the authoritative source of truth, mitigating risks associated with processing potentially untrusted data from external API responses.
Audit Metadata