agent-kit-plugin

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides templates for interacting with the Hedera network using official SDKs (@hashgraph/hedera-agent-kit and @hiero-ledger/sdk). All external communications target well-known Hedera infrastructure (e.g., mirrornode.hedera.com).
  • [SAFE]: Recommends standard secure practices for handling credentials, such as using environment variables (process.env.PRIVATE_KEY) rather than hardcoding sensitive information.
  • [SAFE]: Enforces strong input validation through Zod schemas in all tool examples, which mitigates common injection and malformed data risks.
  • [SAFE]: The skill architecture utilizes a BaseTool lifecycle which includes built-in hooks for security policies (e.g., audit trails, recipient limits) provided by the agent kit.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 03:54 AM
Security Audit — agent-trust-hub — agent-kit-plugin