eth-agent
Expertly integrates the eth-agent library for seamless stablecoin transactions on Ethereum, enhancing AI agent payment systems.
Install this skill
Security score
The eth-agent skill was audited on Mar 8, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 104 | console.log(`Approval needed: ${request.summary}`); |
Template literal with variable interpolation in command context
| 135 | console.log(`Success! TX: ${result.value.hash}`); |
Template literal with variable interpolation in command context
| 137 | console.log(`Error: ${result.error.code}`); |
Template literal with variable interpolation in command context
| 138 | console.log(`Suggestion: ${result.error.suggestion}`); |
Template literal with variable interpolation in command context
| 146 | .ok(r => `Sent! TX: ${r.hash}`) |
Template literal with variable interpolation in command context
| 147 | .errWith({ code: 'INSUFFICIENT_FUNDS' }, e => `Need more: ${e.details.shortage}`) |
Template literal with variable interpolation in command context
| 217 | console.log(`Received ${payment.formattedAmount} ${payment.token.symbol}`); |
Template literal with variable interpolation in command context
| 285 | console.log(`${quote.protocol}: ${quote.fee.totalUSD} USD fee`); |
Template literal with variable interpolation in command context
| 299 | console.log(`Ready to bridge. Fee: $${preview.quote?.fee.totalUSD}`); |
Template literal with variable interpolation in command context
| 300 | console.log(`Needs approval: ${preview.needsApproval}`); |
Template literal with variable interpolation in command context
| 314 | console.log(`Progress: ${status.progress}%`); |
Template literal with variable interpolation in command context
| 315 | console.log(`Message: ${status.message}`); |
Template literal with variable interpolation in command context
| 332 | console.log(`Success! Tracking: ${result.value.trackingId}`); |
Template literal with variable interpolation in command context
| 334 | console.log(`Error: ${result.error.code}`); |
Template literal with variable interpolation in command context
| 335 | console.log(`Suggestion: ${result.error.suggestion}`); |
Access to .env file
| 30 | privateKey: process.env.ETH_PRIVATE_KEY, |
Access to .env file
| 440 | privateKey: process.env.ETH_PRIVATE_KEY, |
Access to .env file
| 441 | rpcUrl: process.env.RPC_URL, |
External URL reference
| 31 | rpcUrl: 'https://eth.llamarpc.com', |
External URL reference
| 190 | bundlerUrl: 'https://bundler.example.com', |