bitget-wallet
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains an instruction-based update mechanism where the agent checks for new versions by fetching a CHANGELOG from the vendor's GitHub repository. This is a standard vendor lifecycle feature that targets trusted infrastructure.
- [COMMAND_EXECUTION]: The skill provides utility scripts (
bitget_api.py,order_sign.py,x402_pay.py) designed to be executed by the agent to perform API queries and cryptographic signing operations. - [DATA_EXFILTRATION]: The
x402_pay.pyscript transmits signed cryptographic authorizations to external resource servers to pay for API access. This functionality is protected by a mandatory $1.00 USD safety cap per request to prevent significant fund exposure. - [PROMPT_INJECTION]: The
SKILL.mdfile provides extensive instructions regarding wallet setup and secure key management. These instructions guide the agent to use secure storage and to derive and discard private keys ephemerally, reducing the risk of credential exposure. - [SAFE]: No malicious patterns such as obfuscation, persistence mechanisms, or unauthorized privilege escalation were detected. The skill uses standard libraries and directs network traffic only to the official Bitget Wallet API or user-designated payment servers.
Audit Metadata