build
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the installation and use of the Helius CLI and MCP server via npx commands. These tools are officially provided by the vendor for project management and blockchain interaction.
- [DATA_EXFILTRATION]: The skill manages a Solana keypair file at ~/.helius-cli/keypair.json. This is a sensitive file path used by the Helius CLI for account identity and transaction signing, which is standard for blockchain development tools.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted blockchain data, including transaction descriptions and NFT metadata. 1. Ingestion points: Data is retrieved from the Solana blockchain via DAS and Enhanced Transaction APIs. 2. Boundary markers: No specific delimiters are prescribed for handling external strings. 3. Capability inventory: The agent has access to command execution (npx) and filesystem operations. 4. Sanitization: The instructions do not explicitly require the agent to sanitize or validate external content before processing.
Audit Metadata