vara-wallet
Enables AI agents to interact with the Vara Network on-chain for deploying programs, managing wallets, and monitoring events.
Install this skill
or
65/100
Security score
The vara-wallet skill was audited on Jun 8, 2026 and we found 5 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 49
Access to hidden dotfiles in home directory
SourceSKILL.md
| 49 | The passphrase is stored at `~/.vara-wallet/.passphrase` (0600). The agent never sees or handles it. |
medium line 312
Access to hidden dotfiles in home directory
SourceSKILL.md
| 312 | 2. **Local cache** — `~/.vara-wallet/idl-cache/<codeId>.cache.json`, populated automatically by previous fetches or by `idl import` |
medium line 431
Access to hidden dotfiles in home directory
SourceSKILL.md
| 431 | | `PASSPHRASE_REQUIRED` | Encrypted wallet, no passphrase | Check `~/.vara-wallet/.passphrase` exists | |
medium line 447
Access to hidden dotfiles in home directory
SourceSKILL.md
| 447 | | `PERMISSION_DENIED` | OS-level permission error (e.g. `idl clear --yes` on a read-only dir) | Check filesystem permissions on `~/.vara-wallet/` | |
high line 141
Access to system keychain/keyring
SourceSKILL.md
| 141 | | `$VW wallet export <name> [--decrypt]` | Export keyring JSON | |
Scanned on Jun 8, 2026
View Security Dashboard