clanker
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No malicious patterns detected. The provided files are reference documentation and code snippets for using the Clanker SDK for legitimate cryptocurrency token operations.\n- [DATA_EXPOSURE] (SAFE): All provided code examples follow best practices by referencing environment variables (e.g., process.env.PRIVATE_KEY) instead of hardcoding sensitive private keys or credentials.\n- [EXTERNAL_DOWNLOADS] (SAFE): The documentation suggests standard, well-known packages (clanker-sdk, viem) from legitimate registries. No suspicious or unverified third-party scripts are executed.\n- [INDIRECT_PROMPT_INJECTION] (LOW): While the token deployment functions ingest user-controlled strings (name, symbol, metadata), this is a necessary feature for the tool's primary purpose. Standard LLM guardrails should be used when an agent populates these fields from untrusted data.
Audit Metadata