siwa
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@buildersgarden/siwaandviempackages from the public npm registry. - [COMMAND_EXECUTION]: The documentation includes instructions for using
npm installto set up the necessary development environment and dependencies. - [DATA_EXFILTRATION]: The skill initiates network requests to
api.bankr.botfor transaction submission and to user-defined servers (e.g.,api.example.com) for authentication flows. Since the skill is authored byBankrBot, thebankr.botdomain is an official vendor resource. - [SAFE]: The implementation avoids hardcoding sensitive information by sourcing the
BANKR_API_KEYandRECEIPT_SECRETfrom environment variables, which is a standard security practice to prevent credential leakage.
Audit Metadata