chainlink-ccip-skill
Handle Chainlink CCIP requests including cross-chain token transfers, cross-chain messaging, fund bridging, sender and receiver contract development, message status lookup, route connectivity checks, supported token discovery, and CCT standard. Use this skill whenever the user mentions CCIP, Chainlink cross-chain, cross-chain token bridges on Chainlink, or wants to move tokens or data between blockchains using Chainlink infrastructure, even if they do not say 'CCIP' explicitly.
66
—
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W009: Direct money access capability detected (payment gateways, crypto, banking)
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
Direct money access detected (high risk: 1.00). The skill is explicitly centered on cross-chain token transfers and CCIP messaging and references concrete SDK/CLI tools (the ccip_sdk MCP tool, SDK/CLI invocation) and token-transfer/bridge operations. It includes actions like "sending", "bridging funds", "token-transfer contracts", "create a token", and handling routes/lanes — all specific crypto/blockchain financial operations. Even though the guardrails forbid executing writes and require user-run preflight artifacts, the skill is specifically designed to prepare and interact with on-chain transfers via CCIP SDKs and tooling, which qualifies as direct financial execution capability per the crypto/blockchain criterion.
- Repository
- smartcontractkit/chainlink-agent-skills
- Commit
6a60106
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.