The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of the wallet-cli tool for managing cryptocurrency accounts, transactions, and encryption. It maps informal user requests to specific CLI commands like session view, account discover, and send.
[EXTERNAL_DOWNLOADS]: The instructions recommend installing the @ledgerhq/wallet-cli package globally using standard package managers (npm, pnpm, yarn, bun). This is a vendor-provided tool from the skill author.
[PRIVILEGE_ESCALATION]: Several commands require the dangerouslyDisableSandbox: true flag to function correctly. This is necessary to allow the CLI to interact with hardware devices via USB and to access the OS keychain for managing agent and ring encryption keys.
[CREDENTIALS_UNSAFE]: The skill documentation discusses the use of the WALLET_PASS environment variable for the ring encryption feature. It explicitly warns against hardcoding passwords in commands or shell history and instead provides instructions for secure injection using command substitution from the OS keychain (e.g., security on macOS or secret-tool on Linux).
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data such as wallet addresses, transaction amounts, and tickers from user requests. To mitigate injection risks, the instructions mandate explicit user confirmation for sensitive actions, the use of --dry-run for validation, and physical verification of addresses and transaction details on the Ledger hardware device's trusted display.

wallet-cli-usage