oathe
Oathe Security Badge

Is eltontay/circle-wallet safe?

Yes. eltontay/circle-wallet is safe to install. Oathe's behavioral security audit gave the circle-wallet skill by eltontay a trust score of 92/100 with 3 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/eltontay/circle-wallet

92
SAFE

Is eltontay/circle-wallet safe to install?

This Circle wallet skill is a legitimate integration for USDC operations via Circle's Developer-Controlled Wallets API. The code is well-structured TypeScript with appropriate security practices, proper credential management, and clean installation behavior.

What security issues were found in eltontay/circle-wallet?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 80/100 · 5%

Findings (3)

LOW Network Access to External API -10 ▶

Skill requires network access to api.circle.com for legitimate wallet operations. This is properly declared in package.json permissions.

LOW PostInstall Build Script -15 ▶

Standard TypeScript compilation during npm install. This is a common and safe build step.

INFO Financial Transaction Capability -20 ▶

Skill enables USDC cryptocurrency transactions. While legitimately implemented, financial operations inherently require user caution and proper API key management.

Should I install eltontay/circle-wallet?

Oathe's verdict for eltontay/circle-wallet is SAFE with a trust score of 92/100. Recommendation: Install.