skills/bankrbot/skills/veil/Gen Agent Trust Hub

veil

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the @veil-cash/sdk via NPM or by cloning the official repository from github.com/veildotcash/veildotcash-sdk. These are well-known sources for the service being integrated.
  • [COMMAND_EXECUTION]: The skill executes local shell scripts that interface with the veil CLI and the Bankr Agent API. It uses curl to communicate with api.bankr.bot to submit prompts and sign transactions, which is consistent with the vendor's own infrastructure.
  • [CREDENTIALS_UNSAFE]: The skill manages sensitive data, including a blockchain private key (VEIL_KEY) and a Bankr API key. It implements security measures such as creating a dedicated directory ~/.clawdbot/skills/veil and applying chmod 600 permissions to environment files to restrict access. While scripts/veil-keypair.sh can output the private key to the agent's context, this is an intended management feature for the user/agent to verify the setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 02:42 PM