HashPack Wallet

Integrate HashPack for Hedera blockchain login, transaction signing, DApp connection, and account balance retrieval in web applications.

Security Scan

The skill is an instruction-only guide to integrate the HashPack browser wallet for Hedera and its requirements and instructions line up with that purpose, but the package has no source/homepage which lowers confidence.

Purpose & Capability

Name/description (HashPack wallet integration for Hedera) matches the SKILL.md: all examples reference window.hashpack, connect/sign/disconnect, account IDs, and Hedera transaction types. No unrelated capabilities, credentials, or binaries are requested.

Instruction Scope

Runtime instructions are limited to client-side integration (window.hashpack), connecting, signing transactions, and querying balances. The instructions do not ask the agent to read arbitrary files, access unrelated environment variables, or transmit data to unexpected endpoints beyond the listed Hedera/HashPack endpoints.

Install Mechanism

Instruction-only skill with no install spec or code files, which is low risk. Note: there is no link to an official HashPack distribution or homepage in the metadata—you'll need to ensure the HashPack script/extension you include in your app is the official one.

Credentials

The skill declares no environment variables or credentials, and the instructions do not require secrets or unrelated service tokens. The listed API endpoints (mainnet/testnet/previewnet) are appropriate for Hedera/HashPack integration.

Persistence & Privilege

The skill is not always-enabled and does not request elevated persistence or system-wide changes. It does not modify other skills or agent configuration; autonomous invocation defaults are standard and not by themselves concerning here.

Assessment

This skill is a coherent, client-side integration guide for the HashPack browser wallet and does not request credentials or perform installs. Before using it: (1) confirm you obtain HashPack from the official source (extension or script) — the skill metadata lacks a homepage/source, which reduces confidence; (2) test in a staging environment and review the permission prompts HashPack shows to users (wallets will ask to approve connections and signatures); (3) never hard-code private keys or requests for secrets in your app; (4) verify the listed endpoints (https://*.hashio.io) are the correct, official Hedera gateway endpoints you intend to use; (5) if you plan to allow an autonomous agent to use this skill, remember an agent that can act on behalf of a connected wallet can initiate transactions once the user has approved connections—ensure you understand when and how approvals happen. If you can provide an official source or homepage for this skill/implementation, confidence can be raised to high.

HashPack Wallet Integration

Quick Start

// Detect HashPack
const hashpack = (window as any).hashpack;

// Connect
const result = await hashpack.connect();

// Get account ID
const accountId = result.accountId; // e.g., "0.0.12345"

Account ID Format

Hedera account IDs are format: 0.0.12345 (shard.realm.num)

Key Methods

// Connect (opens popup)
await hashpack.connect();

// Sign and submit transaction
const tx = new TransferTransaction()
  .addHbarTransfer(from, -10)
  .addHbarTransfer(to, 10);
await hashpack.signTransaction(tx);

// Get balance
const balance = await new AccountBalanceQuery()
  .setAccountId(accountId)
  .execute(client);

// Disconnect
hashpack.disconnect();

Environment

• Mainnet: https://mainnet.hashio.io/api
• Testnet: https://testnet.hashio.io/api
• Previewnet: https://previewnet.hashio.io/api

Transaction Types

• TransferTransaction - Send HBAR/tokens
• ContractExecuteTransaction - Call contract
• TokenAssociateTransaction - Associate with token
• TokenMintTransaction - Mint tokens
• TopicCreateTransaction - Create HCS topic