thegraph-token-mcp-skill

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Comprehensive analysis of the skill's instructions, metadata, and scripts revealed no malicious patterns or security risks across all threat categories.- [COMMAND_EXECUTION]: The skill utilizes the uxc CLI and creates a local alias thegraph-token-mcp-cli. These commands are strictly for API interaction and are not used for unauthorized system access.- [EXTERNAL_DOWNLOADS]: The skill connects to official endpoints at token-api.mcp.thegraph.com for token data and thegraph.market for authentication management. These are legitimate services and do not involve untrusted code execution.- [CREDENTIALS_UNSAFE]: The skill implementation avoids hardcoding secrets, instead guiding users to manage API tokens through environment variables and the uxc credential manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 09:43 AM