starknet-mini-pay
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed with a non-custodial architecture for its Telegram bot component, ensuring that private keys are never handled by the bot; instead, it generates deep links for users to sign transactions in their own wallet applications.
- [SAFE]: The CLI tool (
scripts/cli.py) utilizes environment variables for private key management, adhering to common security practices for developer-centric blockchain utilities. - [SAFE]: All identified dependencies are standard, well-maintained libraries within the Starknet and Python ecosystems, such as
starknet-pyandpython-telegram-bot. - [SAFE]: The code implements proper transaction status checking and block monitoring without any suspicious background network activities.
- [SAFE]: Input parsing for payment links and invoices uses standard library functions and includes basic validation for Starknet addresses and token types.
Audit Metadata