moonpay-hardware-wallet
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the mp (MoonPay) CLI tool for tasks such as managing hardware wallets, fetching balances, and initiating blockchain transactions.
- [INDIRECT_PROMPT_INJECTION]: The skill uses user-supplied parameters (wallet names, token addresses, amounts) to construct shell commands for the MoonPay CLI. 1. Ingestion points: User input for command-line arguments defined in SKILL.md. 2. Boundary markers: Absent; there are no explicit delimiters or instructions for the agent to ignore potentially malicious embedded content in the user data. 3. Capability inventory: Execution of shell commands via the mp CLI. 4. Sanitization: Absent; the skill does not include validation or escaping logic for the user-provided parameters.
Audit Metadata