The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute the awal CLI with parameters derived from user input, including email addresses, OTP codes, transaction amounts, and recipient addresses.\n
Evidence: Central to the operations described in SKILL.md and the references/ directory.\n
Sanitization: Implements rigorous input validation rules requiring matches against specific regular expressions (e.g., ^\d{6}$ for verification codes) and enforces single-quoting of shell arguments to prevent variable expansion or command injection.\n- [EXTERNAL_DOWNLOADS]: Fetches and runs the awal CLI package version 2.12.0 via npx and suggests the installation of Node.js libraries such as express and various @x402 scoped packages for building paid services.\n
Evidence: Defined in the allowed-tools section of SKILL.md and the implementation guide in references/x402-monetize.md.\n- [REMOTE_CODE_EXECUTION]: Dynamically executes the awal tool from the NPM registry at runtime through the npx utility.\n
Evidence: Preflight authentication checks and command index in SKILL.md and references/auth.md.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the ingestion and processing of data from untrusted external sources.\n
Ingestion points: Results from x402 Bazaar searches and data returned from the CDP SQL query API via the awal x402 pay command.\n
Boundary markers: While user-provided queries are validated, the instructions lack defined delimiters or 'ignore' directives for the content of responses returned from external services.\n
Capability inventory: The agent possesses significant capabilities, including the ability to transfer funds (USDC, ETH, POL, SOL), perform asset trades, and execute local shell commands.\n
Sanitization: Input validation is applied to outgoing data, but there is no specification for sanitizing or verifying the contents of data returned from external blockchain queries before interpretation.\n- [DATA_EXFILTRATION]: Transmits transaction details and funds to recipient addresses and communicates with external endpoints for query processing.\n
Evidence: Transfers of crypto assets and transmission of SQL queries to x402.cdp.coinbase.com as part of the core functionality.

agentic-wallet