emblem-ai-agent-wallet
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the @emblemvault/agentwallet package from the npm registry. This is a vendor-provided tool essential for the skill's wallet operations. It also includes instructions for cloning the official source code repository from GitHub for auditing purposes.
- [COMMAND_EXECUTION]: The skill invokes the emblemai CLI via shell commands to interact with blockchain data, manage wallet profiles, and check account balances. It also utilizes Bash scripts to ensure local documentation is synchronized with the CLI tool's command registry.
- [INDIRECT_PROMPT_INJECTION]: The documentation identifies the potential for malicious instructions to be embedded in on-chain data like token names or transaction memos. It mandates security guardrails, such as wrapping tool outputs in explicit delimiters and prohibiting the direct interpolation of untrusted data into subsequent shell commands or prompts.
- [DATA_EXFILTRATION]: The skill manages sensitive credentials and session tokens stored in the ~/.emblemai directory. It establishes strict local file permission requirements (0600/0700) and includes warnings to prevent the exposure of passwords, private keys, or seed phrases in chat history or logs.
Audit Metadata