mini-apps
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and reference implementations hosted on nimiq.dev and GitHub (including repositories under the Albermonte and Eligioo namespaces). It also provides a link to a raw configuration file on GitHub for EVM token metadata. These resources are used for development guidance and configuration purposes.
- [COMMAND_EXECUTION]: The instruction set provides standard terminal commands for project initialization and dependency management, such as
npm install @nimiq/mini-app-sdk,npm create vite, andnpm run dev -- --host. These commands are routine for web development and are intended for execution by the developer on their local machine to facilitate the connection between a mobile device and a development server. - [DATA_EXPOSURE]: The skill includes explicit security rules and a checklist prohibiting any attempt to access private keys or wallet internal state. It instructs developers to use the injected providers for all signing and transaction operations, ensuring that sensitive data remains within the wallet's secure context and requires native user approval dialogs.
Audit Metadata