ton-manage-wallets
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests wallet registry data from
~/.config/ton/config.jsonto perform wallet management tasks. This presents a potential surface where malicious data in the configuration file could influence agent actions. \n - Ingestion points: Wallet registry data read from
~/.config/ton/config.json(referenced in SKILL.md). \n - Boundary markers: The instructions do not specify delimiters or ignore-instructions for the data loaded from the config file. \n
- Capability inventory: Includes sensitive operations such as listing/removing wallets, rotating operator keys, and the ability to open browser URLs using host tools. \n
- Sanitization: No sanitization or validation logic for the registry data is described in the skill instructions.
Audit Metadata