IC Dashboard APIs

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes a command that pipes a remote JSON file into a Python one-liner for validation purposes. Evidence: curl -s "https://ic-api.internetcomputer.org/api/v3/openapi.json" | python3 -c "import sys,json; json.load(sys.stdin); print('OK')" in SKILL.md. Analysis: This is a smoke test to verify that the API returns a valid JSON response. The Python code is a static string that only performs JSON parsing and does not execute any logic from the fetched file. The source domain belongs to the skill's official vendor (dfinity).
  • [COMMAND_EXECUTION]: The skill documentation provides numerous curl examples to interact with public APIs. Evidence: Examples such as curl -s "https://ic-api.internetcomputer.org/api/v4/canisters?limit=5" used throughout the implementation and verification sections. Analysis: These commands are used for read-only access to public blockchain data, which is the primary purpose of the skill. All target domains are official infrastructure maintained by the author.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 02:39 AM