gator-cli
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
gatorCLI tool. This is the intended purpose of the skill and falls within the scope of the MetaMask developer tools described. - [CREDENTIALS_UNSAFE]: The skill documentation explicitly warns that the underlying CLI tool stores private keys in plaintext JSON (
~/.gator-cli/permissions.json). While this is a security risk in the tool itself, the skill correctly labels this as an 'Operational Note' and warns the user not to use accounts with significant funds. The skill also documents how users should provide their ownapiKeyin a local configuration file, which is a standard developer practice.
Audit Metadata