analyzing-on-chain-data
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches DeFi and blockchain metrics from recognized public APIs:
api.llama.fi,yields.llama.fi, andapi.coingecko.com. These are well-known technology services for crypto data and are used as documented.\n- [COMMAND_EXECUTION]: Utilizes a restricted bash toolBash(crypto:onchain-*)to run local Python analytics scripts (onchain_analytics.py). This scoping limits the agent's shell access to specific, intended commands.\n- [DATA_EXPOSURE]: Implements a performance-enhancing cache at~/.onchain_analytics_cache.json. The scriptdata_fetcher.pywrites API responses to this file to minimize redundant network requests; it does not access sensitive system files.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could theoretically contain instructions. However, the risk is minimal as the data consists of financial metrics and the agent's capabilities are appropriately scoped.\n - Ingestion points:
scripts/data_fetcher.py(viarequests.getfrom external APIs)\n - Boundary markers: Absent\n
- Capability inventory:
Read,Write,Edit,Grep,Glob,Bash(crypto:onchain-*)(SKILL.md)\n - Sanitization: Data is parsed as JSON and formatted for display in
scripts/formatters.py.
Audit Metadata