chia-walletconnect
Enables Chia wallet verification via Telegram using WalletConnect, providing secure proof of wallet ownership for various use cases.
Install this skill
Security score
The chia-walletconnect skill was audited on Feb 9, 2026 and we found 17 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 116 | message: `✅ Wallet verified!\n\nAddress: ${address}` |
Template literal with variable interpolation in command context
| 125 | message: `❌ Verification failed: ${result.error}` |
Template literal with variable interpolation in command context
| 329 | message: `✅ Verified! Welcome, ${address.substring(0, 12)}...` |
Webhook reference - potential data exfiltration
| 241 | - [ ] Add rate limiting on webhook endpoints |
Webhook reference - potential data exfiltration
| 258 | │ └── index.js # Express webhook server |
Ngrok tunnel reference
| 71 | # Expose via ngrok or reverse proxy |
Access to .env file
| 200 | Create `.env` in skill folder: |
Access to .env file
| 311 | web_app: { url: process.env.WEB_APP_URL } |
External URL reference
| 58 | # Copy the URL (e.g., https://chia-verify.vercel.app) |
External URL reference
| 76 | 1. Message [@BotFather](https://t.me/BotFather) |
External URL reference
| 94 | web_app: { url: 'https://your-app.vercel.app' } |
External URL reference
| 153 | **Endpoint:** `POST https://api.mintgarden.io/address/verify_signature` |
External URL reference
| 205 | MINTGARDEN_API_URL=https://api.mintgarden.io |
External URL reference
| 210 | 1. Visit [WalletConnect Cloud](https://cloud.walletconnect.com) |
External URL reference
| 406 | - **MintGarden API:** https://api.mintgarden.io/docs |
External URL reference
| 408 | - **Telegram Web Apps:** https://core.telegram.org/bots/webapps |
External URL reference
| 409 | - **Sage Wallet:** https://www.sagewallet.io/ |