zerion
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
zerion-clipackage globally from the npm registry. - [CREDENTIALS_UNSAFE]: Provides setup patterns for authentication that involve exporting sensitive environment variables, such as
ZERION_API_KEY,WALLET_PRIVATE_KEY,EVM_PRIVATE_KEY, andSOLANA_PRIVATE_KEY. These keys are used for signing transactions and accessing account analytics. - [COMMAND_EXECUTION]: Utilizes the
Bashtool to interact with the local filesystem (accessing~/.ows/for encrypted vault storage and~/.zerion/config.json) and to execute crypto-related operations via thezerionbinary. - [DATA_EXPOSURE]: Accesses specific local configuration and vault paths (
~/.ows/,~/.zerion/config.json) to manage encrypted wallet data and agent tokens.
Audit Metadata