near-intents-trading
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that downloads a shell script from the vendor's official GitHub repository and pipes it to the shell. This is the documented installation method for the required tools.
- [EXTERNAL_DOWNLOADS]: Fetches tool updates and configuration data directly from the vendor's GitHub repository and specified cloud endpoints (Flipside, Ankr).
- [COMMAND_EXECUTION]: Executes local CLI tools (
near-intents,portfolio) to perform crypto operations. The skill explicitly instructs the agent to obtain user confirmation before executing transactions or swaps. - [CREDENTIALS_UNSAFE]: Manages user-provided API keys and wallet addresses by storing them in local configuration files (
~/.near-intents.json,~/.portfolio.json), which is consistent with standard local CLI tool management.
Audit Metadata