thegraph-token-mcp-skill
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions, metadata, and scripts revealed no malicious patterns or security risks across all threat categories.- [COMMAND_EXECUTION]: The skill utilizes the
uxcCLI and creates a local aliasthegraph-token-mcp-cli. These commands are strictly for API interaction and are not used for unauthorized system access.- [EXTERNAL_DOWNLOADS]: The skill connects to official endpoints attoken-api.mcp.thegraph.comfor token data andthegraph.marketfor authentication management. These are legitimate services and do not involve untrusted code execution.- [CREDENTIALS_UNSAFE]: The skill implementation avoids hardcoding secrets, instead guiding users to manage API tokens through environment variables and theuxccredential manager.
Audit Metadata