OpenAgentSkill
GitHub200+

Skill audit report

chainlink-confidential-ai-attester-skill Audit report.

Chainlink Confidential AI Attester (alpha): submit private documents to an LLM inside an AWS Nitro Enclave and get back a cryptographically attested result — raw documents never leave the TEE. Use for these hackathon scenarios: (1) undercollateralized DeFi lending — upload a bank statement, get an attested approved/denied JSON decision without exposing financials on-chain; (2) accredited investor verification — check SEC Rule 501 qualification from brokerage statements privately; (3) KYC/AML screening — analyse ID docs and transaction history inside a TEE, return a pass/fail with flags; (4) proof of reserves — verify custodian balance reports against claimed reserves; (5) any use case where an AI must read sensitive user documents and the result needs a cryptographic proof of what model ran on what data. Trigger on: private inference, attested AI, TEE inference, confidential AI, or undercollateralized lending / KYC / accredited investor mentioned alongside document analysis, or the pro

BLOCKED · BLOCKRiskyGenerated Nov 6, 2026Heuristic metadata audit
72
Audit
64
Trust
65
Quality
70
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

64
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

126 GitHub stars

Stars/forks activity

WARN

57

126 stars, 21 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

WARN

46

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

18

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/smartcontractkit/chainlink-agent-skills/tree/main/chainlink-confidential-ai-attester-skill

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 17 Needs review

Install path

92

PASS

npx skills add smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill

Repository

88

PASS

https://github.com/smartcontractkit/chainlink-agent-skills/tree/main/chainlink-confidential-ai-attester-skill

License

86

PASS

MIT

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

The skill depends on an external beta service (Chainlink Confidential AI Attester) that may have availability or stability issues, but this is not a security concern.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

46

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

18

FIX

secrets or environment access, shell or command execution

Stars/forks activity

57

FIX

126 stars, 21 forks; issue activity unavailable in current metadata

Adoption

68

INFO

126 GitHub stars

Financial decision safety

20

FIX

Potential execution surface detected; do not connect live broker, exchange, wallet, or payment credentials.

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • Financial research output is not financial advice; require human review before any live investment decision
  • Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
  • The skill depends on an external beta service (Chainlink Confidential AI Attester) that may have availability or stability issues, but this is not a security concern.
  • No explicit handling for API key rotation or validation before making requests, though the skill correctly instructs using environment variables.
  • Financial research output is not financial advice; require human review before any live investment decision.
  • This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Stars/forks activity: 126 stars, 21 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, credential or environment access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next

Echarts

Apache ECharts is a powerful, interactive charting and data visualization library for browser

67K Stars · Audit report

D3

Bring data to life with SVG, Canvas and HTML. :bar_chart::chart_with_upwards_trend::tada:

113K Stars · Audit report

Scientific Agent Skills

Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.

33K Stars · Audit report