AgentsBank

• Analyzed: May 12, 2026, 3:34 AM
• Findings: 1
• Version: 1.0.6
• Hash: ee1675b05c49b067e32647dad71114c909596212fbec0aad7558317b0c2ef83b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for secure, scoped crypto banking operations for AI agents. It explicitly implements strong security controls, such as `disableModelInvocation: true` and `noModelAutonomy: true` in `SKILL.md` and its internal metadata, preventing autonomous financial transactions. The code makes API calls only to `https://api.agentsbank.online` and includes client-side guardrails like address whitelisting/blacklisting and transaction limits. There is no evidence of intentional malicious behavior, data exfiltration to unlisted endpoints, or prompt injection attempts to subvert agent security. While `WebhookConfig` exists in types, the skill itself does not configure or activate it, and the documentation explicitly disallows requests to unlisted endpoints, indicating a design focused on security.