rocket-pool
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
onchainosCLI to resolve user wallet addresses and submit smart contract transactions. - [EXTERNAL_DOWNLOADS]: It retrieves protocol data such as APY and exchange rates from the official Rocket Pool API (
api.rocketpool.net) and a well-known public Ethereum RPC endpoint (ethereum.publicnode.com). - [SAFE]: The skill architecture forces a transaction preview and requires an explicit
--confirmflag for write operations, ensuring the user retains control over funds. - [SAFE]: Includes explicit instructions in the instruction set to treat all external data from APIs and blockchain state as untrusted, effectively managing potential indirect prompt injection surfaces.
Audit Metadata