nova-wallet
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing the
novaCLI tool for blockchain interactions, including financial transactions and wallet management. These commands are essential to the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill instructions include the installation of the
@mynthai/novapackage from the NPM registry. As this is the official package provided by the skill's vendor, it is a legitimate dependency. - [CREDENTIALS_UNSAFE]: The skill provides functionality for exporting and importing wallet secrets (private keys and mnemonics) and handling claim URLs. The documentation provides clear guidelines for the agent to treat these as sensitive, avoid persistent logging, and warn users before secrets are exposed.
Audit Metadata