Skip to main content

silk

Facilitates agent banking and payments on Solana, enabling stablecoin transactions with escrow and automated spending limits.

Install this skill

or
78/100

Security score

The silk skill was audited on Feb 16, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 31

Access to hidden dotfiles in home directory

SourceSKILL.md
31Your wallet and agent ID are saved at `~/.config/silk/config.json`. Your private key never leaves your machine. `silk init` is idempotent — safe to run multiple times.
medium line 120

Access to hidden dotfiles in home directory

SourceSKILL.md
120Contact names are case-insensitive and stored lowercase. Saved at `~/.config/silk/contacts.json`.
medium line 698

Access to hidden dotfiles in home directory

SourceSKILL.md
698- Keys are stored locally at `~/.config/silk/config.json` — never share this file
low line 5

External URL reference

SourceSKILL.md
5homepage: https://silkyway.ai
low line 6

External URL reference

SourceSKILL.md
6metadata: {"category":"payments","api_base":"https://api.silkyway.ai","author":"silkysquad","openclaw":{"requires":{"bins":["silk"]},"install":[{"id":"silk-npm","kind":"node","label":"Silk CLI","packa
low line 45

External URL reference

SourceSKILL.md
45| `mainnet-beta` | `https://api.silkyway.ai` | Mainnet (real USDC) |
low line 46

External URL reference

SourceSKILL.md
46| `devnet` | `https://devnet-api.silkyway.ai` | Devnet (test USDC) |
low line 75

External URL reference

SourceSKILL.md
75# Example: https://app.silkyway.ai/transfers/9aE5kBqRvF3...?cluster=devnet
low line 163

External URL reference

SourceSKILL.md
163https://app.silkyway.ai/account/setup?agent=YOUR_WALLET_ADDRESS
low line 238

External URL reference

SourceSKILL.md
238Base URL: `https://api.silkyway.ai` (mainnet) or `https://devnet-api.silkyway.ai` (devnet)
Scanned on Feb 16, 2026
View Security Dashboard
Installation guide →