envio
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill content is restricted to documentation and instructional code snippets for the Envio blockchain data stack. No executable scripts are included, and no malicious patterns (obfuscation, injection, or exfiltration) were identified.
- [CREDENTIALS_UNSAFE] (SAFE): The skill correctly identifies the need for API tokens and provides specific guidance on secure management, such as using
process.env.ENVIO_API_TOKEN, utilizing.gitignore, and avoiding hardcoded secrets. - [EXTERNAL_DOWNLOADS] (SAFE): References to external packages (
@envio-dev/hypersync-clienton npm andhypersyncon PyPI) are for the official client libraries required for the service's intended use. - [COMMAND_EXECUTION] (SAFE): Instructional commands such as
pnpx envio initandpnpm codegenare standard development workflow steps for the indexer framework and do not pose a security risk in this context.
Audit Metadata