cobo-agentic-wallet-prod

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The bootstrap-env.sh script downloads the caw CLI and TSS Node binaries from the vendor's infrastructure at download.agenticwallet.cobo.com and download.tss.cobo.com.
  • [EXTERNAL_DOWNLOADS]: The skill performs a version check by fetching the SKILL.md file from https://agenticwallet.cobo.com to ensure the local version is up to date.
  • [EXTERNAL_DOWNLOADS]: Various DeFi strategy recipes fetch data from established technology services, including price information from CoinGecko (api.coingecko.com), swap routes from Jupiter (jup.ag), and prediction market data from Polymarket (polymarket.com).
  • [COMMAND_EXECUTION]: The skill executes the downloaded caw and cobo-tss-node binaries to manage wallet state, perform transfers, and interact with smart contracts.
  • [COMMAND_EXECUTION]: Recipes utilize node -e to dynamically generate Ethereum calldata for contract interactions and to compute HMAC signatures for API authentication with Polymarket.
  • [COMMAND_EXECUTION]: The installation process requires npm to install the ethers library, which is used for blockchain data encoding tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 10:55 AM