hiero-cli

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Facilitates the installation of the @hiero-ledger/hiero-cli package from the official NPM registry. This is a legitimate dependency for the skill's primary purpose. The instructions explicitly direct the agent to obtain user confirmation before executing the installation command.
  • [COMMAND_EXECUTION]: Orchestrates interactions with the Hedera network by executing the hcli tool. This includes commands for ledger management, token operations, and smart contract lifecycle tasks.
  • [DATA_EXPOSURE]: Manages sensitive Hedera private keys using a local key management system (KMS). Stored data is persisted in the user's home directory (~/.hiero-cli/state/), following standard practices for local wallet applications. The skill provides clear guidance for users to configure their own operator credentials, and no hardcoded secrets or unauthorized exfiltration patterns were found.
  • [INDIRECT_PROMPT_INJECTION]: Supports the x402 payment scheme which requires processing PAYMENT-REQUIRED headers from external HTTP responses. While this creates an ingestion point for remote data, the CLI tool mitigates risks by validating the challenge payload structure during the signing process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 03:54 AM
Security Audit — agent-trust-hub — hiero-cli