Agnic Check Balance

Check USDC balance across networks (Base, Solana). Use when the user wants to check balance, see how much USDC is available, view funds, or verify wallet bal...

Security Scan

The skill's instructions are coherent for checking USDC balances, but it depends on running npx agnic@latest (dynamic remote code execution) and has no provenance or homepage listed — supply-chain and token-provenance risks remain.

Purpose & Capability

Name/description match the instructions: the SKILL.md simply tells the agent to run the agnic CLI to check USDC balances on Base and Solana. No unrelated creds, binaries, or file paths are requested.

Instruction Scope

Instructions are narrowly scoped to running `npx agnic@latest status` and `npx agnic@latest balance`, optional `AGNIC_TOKEN`, and auth flow. The doc does not ask the agent to read unrelated files or exfiltrate data to other endpoints.

Install Mechanism

There is no install spec, but the runtime instructions require `npx agnic@latest` which will fetch and execute code from the npm registry at runtime. Using @latest means every invocation can run different code (supply‑chain risk) and there is no declared source/homepage to verify the package.

Credentials

No required env vars are declared, but the docs reference `AGNIC_TOKEN` for headless auth (reasonable for a CLI). The skill does not explain where tokens come from or what permissions they grant, so token provenance and scope are unclear.

Persistence & Privilege

Skill is user-invocable, not always:true, and does not request persistence or modify other skills. Default autonomous invocation remains enabled but is not combined with additional broad privileges.

What to consider before installing

This skill is internally consistent for checking USDC balances, but it asks you to run `npx agnic@latest` with no source or homepage provided. Running npx@latest executes code fetched at runtime and is a supply-chain risk. Before installing or running: (1) verify the agnic package on npm (owner, repo, recent activity) and prefer a pinned version instead of @latest; (2) confirm where AGNIC_TOKEN comes from and what permissions it grants; (3) inspect the package source code or run it in an isolated environment (container or sandbox) if you must test; (4) avoid entering private keys or broad-scoped secrets into unknown CLIs. If the author or package provenance cannot be verified, treat this skill with caution.

Checking USDC Balance

Use npx agnic@latest balance to check USDC balance across supported networks.

Authentication

Run npx agnic@latest status --json to verify. If not authenticated:

• Headless (CI/server/agent): Set AGNIC_TOKEN env var or pass --token <token>
• Interactive (has browser): Run npx agnic@latest auth login

See the authenticate-wallet skill for details.

Command Syntax

npx agnic@latest balance [--network <network>] [--json]

Options

Option	Description
--network <name>	Filter by network (default: all networks)
--json	Output result as JSON

Supported Networks

Network	Description
base	Base mainnet (primary)
base-sepolia	Base testnet
solana	Solana mainnet
solana-devnet	Solana devnet

Examples

# Check balance on all networks
npx agnic@latest balance --json

# Check balance on Base mainnet only
npx agnic@latest balance --network base --json

Expected Output

Network       Balance      Address
base          125.50 USDC  0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb7
base-sepolia    0.00 USDC  0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb7
solana          0.00 USDC  N/A
solana-devnet   0.00 USDC  N/A

Error Handling

Common errors:

• "Not authenticated" -- Run npx agnic@latest auth login or set AGNIC_TOKEN
• Network timeout -- Try again or specify a single network with --network base