sodax-wallet-sdk-core

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a documentation hub for the @sodax/wallet-sdk-core library, providing integration guides for EVM, Solana, Sui, Bitcoin, Stellar, ICON, Injective, NEAR, and Stacks blockchains.
  • [EXTERNAL_DOWNLOADS]: The skill references well-known and established blockchain SDKs including viem, @solana/web3.js, @mysten/sui, and @stellar/stellar-sdk. These are official libraries required for the stated functionality of the wallet provider.
  • [DATA_EXPOSURE]: The instructions explicitly guide users to keep private keys out of source code by using environment variables (e.g., process.env.EVM_PK) and strictly warns against embedding secrets in frontend bundles.
  • [INDIRECT_PROMPT_INJECTION]: The integration workflow involves the agent reading local files like package.json and .env to gather project context. While this is a standard operational procedure for a coding assistant, it defines the ingestion surface for the skill. The instructions mitigate risk by focusing on structure and version verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:27 PM
Security Audit — agent-trust-hub — sodax-wallet-sdk-core