analyzing-nft-rarity

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches NFT collection metadata and token attributes from established services including OpenSea, Alchemy, and public IPFS gateways such as Cloudflare and Pinata.
  • [PROMPT_INJECTION]: Ingests untrusted NFT metadata from external sources, presenting an indirect prompt injection surface.
  • Ingestion points: scripts/metadata_fetcher.py (via OpenSea and IPFS).
  • Boundary markers: Absent.
  • Capability inventory: Bash tool usage to execute Python analysis scripts.
  • Sanitization: Attribute names and values are normalized to strings and stripped in scripts/trait_parser.py.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 02:54 AM