zerion
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of the
zerionCLI from the npm registry. - [COMMAND_EXECUTION]: Employs the Bash tool to perform system-level operations including global package installation and CLI execution.
- [CREDENTIALS_UNSAFE]: Provides instructions for configuring highly sensitive environment variables, such as
WALLET_PRIVATE_KEYandZERION_API_KEY, and manages a local encrypted vault in~/.ows/. This access is essential for the tool's functionality as a crypto wallet. - [DATA_EXFILTRATION]: Communicates with official Zerion endpoints (
api.zerion.io,dashboard.zerion.io) and payment protocol domains (x402.org,mpp.dev,tempo.xyz) to synchronize wallet state and execute on-chain actions. - [PROMPT_INJECTION]: As the skill ingests data from external blockchains (portfolio, transaction history), it presents an indirect prompt injection surface. However, this risk is mitigated by the structured JSON output and the specific domain of asset management.
Audit Metadata