onekey-wallet
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation and updating of the official OneKey CLI tool (
@onekeyfe/cli) from the npm registry. - [COMMAND_EXECUTION]: Uses the
@onekeyfe/clito perform wallet operations, hardware device discovery, and schema validation via commands likeonekey version,onekey schema, andonekey auth-login. - [PROMPT_INJECTION]: The instructions include specific safeguards against behavior modification, explicitly refusing to export private keys, seed phrases, or mnemonics even if requested by a user.
- [DATA_EXFILTRATION]: Implements strict rules against echoing imported secrets, mnemonics, or private keys back to the user, ensuring sensitive data remains local to the wallet software/hardware.
- [REMOTE_CODE_EXECUTION]: Utilizes standard package management commands (
npm install) to maintain the vendor's official command-line interface tool.
Audit Metadata