moralis-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows best practices for authentication and network operations.
- [EXTERNAL_DOWNLOADS]: Fetches an OpenAPI schema configuration from the author's official GitHub repository (
holon-run/uxc) to initialize the CLI tool. This is a standard and expected configuration step for theuxcenvironment. - [CREDENTIALS_UNSAFE]: Authentication is handled securely using the
uxc authmechanism. It leverages environment variables (MORALIS_API_KEY) to manage API keys rather than hardcoding sensitive credentials. - [COMMAND_EXECUTION]: Provides instructions to link a local CLI alias (
moralis-openapi-cli) to the Moralis API. This uses the establisheduxctoolset for execution. - [DATA_EXFILTRATION]: All network requests are directed to the official Moralis API endpoints (
deep-index.moralis.io). No suspicious or unauthorized data transmission patterns were found. - [PROMPT_INJECTION]: The skill includes explicit guardrails for the AI agent, such as enforcing read-only operations and prioritizing JSON parsing for data stability. No malicious override patterns or bypass attempts were identified.
Audit Metadata