Skill-Audit-Bericht
chainlink-confidential-ai-attester-skill Audit-Bericht.
Chainlink Confidential AI Attester (alpha): submit private documents to an LLM inside an AWS Nitro Enclave and get back a cryptographically attested result — raw documents never leave the TEE. Use for these hackathon scenarios: (1) undercollateralized DeFi lending — upload a bank statement, get an attested approved/denied JSON decision without exposing financials on-chain; (2) accredited investor verification — check SEC Rule 501 qualification from brokerage statements privately; (3) KYC/AML screening — analyse ID docs and transaction history inside a TEE, return a pass/fail with flags; (4) proof of reserves — verify custodian balance reports against claimed reserves; (5) any use case where an AI must read sensitive user documents and the result needs a cryptographic proof of what model ran on what data. Trigger on: private inference, attested AI, TEE inference, confidential AI, or undercollateralized lending / KYC / accredited investor mentioned alongside document analysis, or the pro
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub-Akzeptanz
Info62
126 GitHub-Stars
Star-/Fork-Aktivität
Warnung57
126 Stars und 21 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Aktuelle Wartung
Bestanden88
1 Monate seit dem letzten Push
Lizenzklarheit
Bestanden86
MIT
README/SKILL.md-Vollständigkeit
Bestanden86
Metadaten enthalten ausreichend Nutzungs- und Workflow-Kontext
Abhängigkeits-/Laufzeitrisiko
Warnung46
command execution surface, credential or environment access
Installationsverfügbarkeit
Bestanden92
npx skills add smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill
Sicherheit des Installationsbefehls
Bestanden92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
Fehlgeschlagen18
secrets or environment access, shell or command execution
Repository-Nachweis
Bestanden86
https://github.com/smartcontractkit/chainlink-agent-skills/tree/main/chainlink-confidential-ai-attester-skill
Prüfstatus
Info66
KI-Prüfdaten verfügbar
Agent-validierte Ergebnisse
Info54
Noch keine Agent-Ergebnisdaten
Prüfungen
Installations- und Adoptionsprüfung
Installationspfad
92
npx skills add smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill
Repository
88
https://github.com/smartcontractkit/chainlink-agent-skills/tree/main/chainlink-confidential-ai-attester-skill
Lizenz
86
MIT
Wartung
88
1 Monate seit dem letzten Push
KI-Prüfung
55
The skill depends on an external beta service (Chainlink Confidential AI Attester) that may have availability or stability issues, but this is not a security concern.
README/SKILL.md-Vollständigkeit
86
Usable description available
Abhängigkeitsrisiko
46
command execution surface, credential or environment access
Sicherheit des Installationsbefehls
92
Standard-Paket- oder Laufzeit-Installationspfad
Berechtigungsumfang
18
secrets or environment access, shell or command execution
Star-/Fork-Aktivität
57
126 Stars und 21 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar
Akzeptanz
68
126 GitHub-Stars
Financial decision safety
20
Potential execution surface detected; do not connect live broker, exchange, wallet, or payment credentials.
Warnungen
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Financial research output is not financial advice; require human review before any live investment decision
- Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
- The skill depends on an external beta service (Chainlink Confidential AI Attester) that may have availability or stability issues, but this is not a security concern.
- No explicit handling for API key rotation or validation before making requests, though the skill correctly instructs using environment variables.
- Financial research output is not financial advice; require human review before any live investment decision.
- This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Stars/forks activity: 126 stars, 21 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
Methode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Nahe Optionen vergleichen
Ähnliche Skills als Nächstes prüfen
Echarts
Apache ECharts is a powerful, interactive charting and data visualization library for browser
67K Stars · Audit-Bericht
D3
Bring data to life with SVG, Canvas and HTML. :bar_chart::chart_with_upwards_trend::tada:
113K Stars · Audit-Bericht
Scientific Agent Skills
Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.
33K Stars · Audit-Bericht