wallet-cli-usage
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
wallet-cliutility to manage cryptocurrency flows and hardware-rooted encryption. It correctly identifies that commands requiring USB (HID) or OS keychain access necessitate thedangerouslyDisableSandbox: trueflag to function within the execution environment. - [EXTERNAL_DOWNLOADS]: The skill references the official
@ledgerhq/wallet-clipackage. This is an expected vendor-owned resource for this tool's functionality. - [CREDENTIALS_UNSAFE]: (Negative finding) The instructions emphasize secure credential handling by advising the use of OS keychains and command substitution (
$(...)) to ensure theWALLET_PASSenvironment variable never appears as a literal string in command history, process logs, or the agent's transcript. - [DATA_EXFILTRATION]: (Negative finding) The skill explicitly cautions against echoing or printing decrypted secrets (from the
ringcommands) to the terminal, directing output to files or pipes instead to maintain data confidentiality.
Audit Metadata