query
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill directly queries the public Hiro API (api.mainnet.hiro.so / api.testnet.hiro.so) as documented in SKILL.md/AGENT.md and implemented in query.ts (e.g., hiro.getContractInterface, getContractInfo, getContractEvents, callReadOnlyFunction), ingesting public, user-generated blockchain data (contracts, events, transactions) that the agent reads and can influence subsequent calls or decisions.
Audit Metadata