moneydevkit
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads packages from the @moneydevkit npm scope, including agent-wallet, create, nextjs, and replit tools for Lightning integration.
- [REMOTE_CODE_EXECUTION]: Uses npx to fetch and execute the latest versions of @moneydevkit utilities at runtime, which is standard for this developer toolkit.
- [COMMAND_EXECUTION]: Executes a local verification script (scripts/check-mdk-prereqs.sh) and various CLI commands to manage wallet states, check balances, and process payments.
- [CREDENTIALS_UNSAFE]: References sensitive secrets including MDK_MNEMONIC (wallet seed) and MDK_ACCESS_TOKEN (API credential) via environment variables and manages local filesystem storage for wallet data in ~/.mdk-wallet/.
Audit Metadata