veil
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@veil-cash/sdkvia NPM or by cloning the official repository fromgithub.com/veildotcash/veildotcash-sdk. These are well-known sources for the service being integrated. - [COMMAND_EXECUTION]: The skill executes local shell scripts that interface with the
veilCLI and the Bankr Agent API. It usescurlto communicate withapi.bankr.botto submit prompts and sign transactions, which is consistent with the vendor's own infrastructure. - [CREDENTIALS_UNSAFE]: The skill manages sensitive data, including a blockchain private key (
VEIL_KEY) and a Bankr API key. It implements security measures such as creating a dedicated directory~/.clawdbot/skills/veiland applyingchmod 600permissions to environment files to restrict access. Whilescripts/veil-keypair.shcan output the private key to the agent's context, this is an intended management feature for the user/agent to verify the setup.
Audit Metadata