Trust Assessment
agentns received a trust score of 92/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 1 low severity. Key findings include Unpinned Python package dependencies, Local storage of unencrypted wallet keys.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Unpinned Python package dependencies The installation instructions recommend installing `agentns-client` and its optional `solana` dependencies without specifying a version. This can lead to supply chain attacks where a malicious update to the package or one of its sub-dependencies could be automatically pulled, compromising the agent's environment or data. It is best practice to pin package versions to ensure deterministic and secure deployments. Pin the package versions in the installation instructions (e.g., `pip install agentns-client==X.Y.Z`). Recommend using a `requirements.txt` file with pinned versions for production deployments. | LLM | SKILL.md:10 | |
| LOW | Local storage of unencrypted wallet keys The skill describes using `load_or_create_wallet()` and `load_or_create_solana_wallet()` which create `wallet.json` and `solana_wallet.json` files. These files are highly likely to contain private keys or seed phrases. Storing unencrypted wallet keys locally on disk is a security risk, as they could be accessed by other processes or attackers if the agent's execution environment is compromised. The `SKILL.md` does not specify any encryption or protection mechanisms for these files. Implement robust encryption for locally stored wallet files, requiring a passphrase or secure key management system. Advise users on secure storage practices for these files and the risks associated with unencrypted storage. Consider using environment variables or a secure vault for sensitive credentials instead of local files. | LLM | SKILL.md:18 |
Scan History
Embed Code
[](https://skillshield.io/report/70c858049aa2f152)
Powered by SkillShield