quicknode
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires multiple third-party packages for blockchain connectivity and payment handling, including @quicknode/sdk, @quicknode/x402, viem, and ethers.
- [PROMPT_INJECTION]: The skill ingests untrusted data from blockchain RPC responses, creating a surface for indirect prompt injection. 1. Ingestion points: Data retrieved via methods like qn_getWalletTokenBalance, getAsset, and eth_getTransactionReceipt. 2. Boundary markers: No explicit delimiters or boundary instructions are present in the reference implementations. 3. Capability inventory: Network communication with RPC endpoints and transaction signing capabilities. 4. Sanitization: No explicit validation or sanitization of RPC response data is demonstrated in the provided code snippets.
Audit Metadata