Teneo Agent SDK/CLI
Security checks across malware telemetry and agentic risk
Overview
The skill's instructions broadly match a CLI for discovering and querying Teneo agents, but the runtime steps perform sensitive actions (auto-install npm packages, write wallet secrets to disk, and auto-sign/pay on-chain) while the registry metadata does not declare the environment variables or installs the SKILL.md expects — this mismatch and the persistence of wallet material warrant caution.
Before installing or running this skill: 1) Review the full teneo.ts script line-by-line (the SKILL.md is an installer template) — don't run it blind. 2) Expect the installer to run npm install in your home directory and create ~/teneo-skill and ~/.teneo-wallet with secret material; consider running in an isolated environment (VM/container) if you want to test. 3) The CLI auto-generates a wallet and can auto-sign and pay with USDC — only fund that wallet with small amounts at first, or supply your own private key only if you understand the risks. 4) Verify the npm packages (@teneo-protocol/sdk, viem, tsx, etc.) and their maintainers before download. 5) Because the registry metadata omits the environment variables the script reads, assume TENEO_PRIVATE_KEY and TENEO_WS_URL can affect behavior — set or withhold them intentionally. 6) If you lack the ability to audit the code, avoid connecting real funds or run the skill in a disposable environment.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings