senpi-onboard
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses shell commands and Node.js one-liners to initialize and update a local state machine located at
~/.config/senpi/state.json. - [EXTERNAL_DOWNLOADS]: Downloads the
etherslibrary andmcporterCLI from the NPM registry to facilitate wallet generation and MCP server configuration. - [CREDENTIALS_UNSAFE]: Generates and stores sensitive credentials, including API keys and private keys, in local files. It mitigates risk by using
chmod 600to restrict access to these files and explicitly instructing the agent not to log or display secrets.
Audit Metadata