analyzing-nft-rarity
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches NFT collection metadata and token attributes from established services including OpenSea, Alchemy, and public IPFS gateways such as Cloudflare and Pinata.
- [PROMPT_INJECTION]: Ingests untrusted NFT metadata from external sources, presenting an indirect prompt injection surface.
- Ingestion points:
scripts/metadata_fetcher.py(via OpenSea and IPFS). - Boundary markers: Absent.
- Capability inventory:
Bashtool usage to execute Python analysis scripts. - Sanitization: Attribute names and values are normalized to strings and stripped in
scripts/trait_parser.py.
Audit Metadata