alchemy-common-errors
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: Performs network operations using
curlto interact with official Alchemy endpoints (eth-mainnet.g.alchemy.comanddashboard.alchemy.com) for diagnostic purposes. These requests utilize environment variables such as${ALCHEMY_API_KEY}and${ALCHEMY_AUTH_TOKEN}to authenticate with the service. - [PROMPT_INJECTION]: The skill ingests and processes data from external RPC providers and API responses, creating a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via JSON-RPC responses and error objects returned by the Alchemy API as seen in
SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the diagnostic logic or prompt context.
- Capability inventory: The skill is configured with
Bash(curl:*),Write, andEdittools, enabling it to execute commands or modify files based on findings. - Sanitization: There is no evidence of sanitization or strict validation for dynamic strings such as
error.messagebefore they are processed or logged.
Audit Metadata