skills/circlefin/skills/use-usdc/Gen Agent Trust Hub

use-usdc

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and utilizes standard, well-known blockchain development libraries such as viem, @solana/kit, and @solana-program/token from the npm registry.
  • [COMMAND_EXECUTION]: Instructions include standard environment setup commands for package installation and file permission management (e.g., chmod 600) to ensure local key security.
  • [CREDENTIALS_UNSAFE]: The documentation provides best-practice guidance for handling private keys using environment variables or dedicated local file paths (e.g., ~/.solana/keys/), rather than hardcoding sensitive information.
  • [PROMPT_INJECTION]: The skill includes explicit safety instructions and "Security Rules" that define boundaries for the agent, requiring user confirmation for transactions and prohibiting the use of unverified contract addresses.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 11:00 PM