hiero-cli
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Facilitates the installation of the
@hiero-ledger/hiero-clipackage from the official NPM registry. This is a legitimate dependency for the skill's primary purpose. The instructions explicitly direct the agent to obtain user confirmation before executing the installation command. - [COMMAND_EXECUTION]: Orchestrates interactions with the Hedera network by executing the
hclitool. This includes commands for ledger management, token operations, and smart contract lifecycle tasks. - [DATA_EXPOSURE]: Manages sensitive Hedera private keys using a local key management system (KMS). Stored data is persisted in the user's home directory (
~/.hiero-cli/state/), following standard practices for local wallet applications. The skill provides clear guidance for users to configure their own operator credentials, and no hardcoded secrets or unauthorized exfiltration patterns were found. - [INDIRECT_PROMPT_INJECTION]: Supports the x402 payment scheme which requires processing
PAYMENT-REQUIREDheaders from external HTTP responses. While this creates an ingestion point for remote data, the CLI tool mitigates risks by validating the challenge payload structure during the signing process.
Audit Metadata