Skills
Navigate
skills/vechain/vechain-ai-skills/vechain-react-native-dev/Gen Agent Trust Hub

vechain-react-native-dev

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates data exchange with the external VeWorld wallet app via deep links, creating a potential input surface.
  • Ingestion points: Deep link handling logic within VeWorldProvider and the redirectSystemPath utility in references/deep-link-setup.md.
  • Boundary markers: The skill instructs the agent to validate responses using isVeWorldResponse and check for errorCode fields before processing.
  • Capability inventory: The skill allows signing transactions and certificates; it does not request capabilities for direct file system modification or unauthorized network requests.
  • Sanitization: Employs mandatory NaCl (Curve25519) encryption/decryption via the decryptPayload utility to ensure that all data received from the wallet is authentic and has not been tampered with.
  • [EXTERNAL_DOWNLOADS]: The skill requires standard dependencies from the VeChain ecosystem and well-known React Native libraries.
  • Packages: Fetches @vechain/react-native-wallet-link, @vechain/sdk-core, and @vechain/sdk-network which are official vendor resources.
  • Infrastructure: References official VeChain node endpoints (e.g., https://testnet.vechain.org) for blockchain communication.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:19 PM
Security Audit — agent-trust-hub — vechain-react-native-dev