starknet-wallet
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external blockchain data and user-provided inputs, creating a surface for indirect prompt injection.
- Ingestion points: Data enters through blockchain state queries and token metadata fetching from
scripts/check-balance.tsandscripts/check-balances.ts. - Boundary markers: Safety policies in
agents/openai.yamlrequire explicit user confirmation and safety checks for all operations. - Capability inventory: The skill possesses significant capabilities, including token transfers and smart contract invocations via
starknet_transferandstarknet_invoke_contracttools. - Sanitization: The skill relies on standard SDKs (
starknet.js,avnu-sdk) and agent-level confirmation prompts for data handling and execution safety. - [EXTERNAL_DOWNLOADS]: The skill interacts with external blockchain services and APIs.
- Fetches token metadata and verified token lists from AVNU's official API.
- Connects to well-known Starknet infrastructure providers such as Alchemy and Cartridge to interact with the network.
- These network operations are necessary for the primary function of the skill and target established ecosystem services.
Audit Metadata