The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses Python scripts and curl commands to interact with a Monero RPC gateway. These commands are restricted to localhost (127.0.0.1) at port 38084.
[DATA_EXFILTRATION]: The skill implements specific defenses against data exfiltration. The scripts/monero_wallet_rpc.py file hardcodes the GATEWAY_URL to 127.0.0.1 to ensure the AGENT_API_KEY is not sent to external servers. Additionally, the script sets session.trust_env = False in the Python requests session, which prevents the exfiltration of credentials through environment-configured proxies.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes user-supplied labels for generating subaddresses and may handle external data during transaction flows. However, the risk is minimal due to the structured nature of the RPC interactions and the limited scope of the tool.

monero-wallet