wallet-trading
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the 'zerion' CLI utility from the public NPM registry if not already present. This is a vendor-owned package provided by the skill author (zeriontech) to enable the skill's primary functionality.
- [COMMAND_EXECUTION]: Utilizes the Bash tool to execute 'zerion' CLI commands. These commands perform cryptocurrency operations including swapping tokens, bridging assets between chains, and listing wallet balances.
- [CREDENTIALS_UNSAFE]: References the 'ZERION_API_KEY' environment variable for authentication. The documentation correctly uses a placeholder ('zk_dev_...') for the key and directs users to the official Zerion dashboard to obtain their own credentials.
Audit Metadata