wallet-cli-usage
Official Ledger wallet-cli - USB-based CLI for Ledger hardware wallet flows (account discover, receive, balances, operations, send, swap quote/execute/status, genuine-check, assets token / token-by-id) and the Ledger Key Ring (ring init/encrypt/decrypt/keys/destroy — LKRP-backed encryption of files and text). Use for any wallet-cli command execution and for mapping informal requests to the right command.
82
85%
Does it follow best practices?
Impact
88%
1.46xAverage score across 2 eval scenarios
Medium
Suggest reviewing before use
Security
2 findings: 2 medium severity. This skill can be installed but you should review these findings before use.
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill is a Ledger wallet CLI explicitly designed to manage crypto funds: it lists supported networks (bitcoin, ethereum, solana) and provides concrete commands that move or authorize movement of money — e.g., `send` (create/sign/broadcast transactions), `swap execute` (execute cross-asset swaps with on-device signing), and `earn deposit` / `earn withdraw` (staking / vault deposits that sign transactions). These are direct financial execution operations (cryptocurrency wallet, signing, broadcasting, staking, swapping).
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
The skill explicitly instructs the agent to disable sandboxing ("dangerouslyDisableSandbox: true") for device and keyring commands and to request/perform a sandbox bypass, which directs the agent to bypass a security mechanism on the host.
- Repository
- LedgerHQ/agent-skills
- Commit
2edb393
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.