smart-accounts-kit
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables an agent to construct and sign blockchain delegations based on user-supplied parameters like recipient addresses and token amounts. This creates a surface where malicious external data could influence the agent to authorize unauthorized transfers. * Ingestion points: Data from the user or agent environment for parameters in create-delegation.md and request-permissions.md. * Capability inventory: signDelegation and sendTransaction allow the agent to authorize blockchain actions. * Sanitization: No explicit sanitization logic is provided in the examples.
- [EXTERNAL_DOWNLOADS]: Instructions involve installing official and well-known libraries such as @metamask/smart-accounts-kit and permissionless via the NPM registry. These are documented neutrally as they are standard dependencies for the vendor's platform.
- [COMMAND_EXECUTION]: The skill provides standard shell commands for environment setup, specifically for package installation using npm.
Recommendations
- CRITICAL: 5 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata