Stellar Agent Wallet
Security checks across malware telemetry and agentic risk
Overview
The visible files are consistent with a Stellar USDC wallet, but this is a real payment-capable skill that will handle a Stellar private key and can move funds.
This appears internally coherent, but treat it like installing a hot-wallet tool: it can sign payments and move real USDC if configured for mainnet. Use a fresh low-balance wallet, test on testnet first, keep .stellar-secret out of git with restrictive permissions, review any autopay ceiling, and be aware that if the secret file is missing it may look for Stellar secret entries in nearby .env files. Because the key sub-skill runtime files were omitted from the provided view, review the repository before trusting it with meaningful funds.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings
