moralis-data-api
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Prompt Injection (SAFE): No instructions designed to override agent safety or bypass system guidelines were found.
- Evidence: Rule files provide strictly technical specifications for API parameters and query formatting.
- Data Exposure & Exfiltration (SAFE): No sensitive data exposure or unauthorized network patterns were detected.
- Evidence: Network activity is confined to legitimate Moralis and blockchain entity domains (e.g., moralis.io, opensea.io).
- Evidence: Example curl commands correctly utilize environment variables for API keys rather than exposing hardcoded credentials.
- Obfuscation (SAFE): No hidden content or malicious obfuscation was identified.
- Evidence: Scanned all files for zero-width characters and homoglyphs with no hits.
- Evidence: Base64 strings in example code correspond to standard technical cursors and JWT headers.
- Remote Code Execution (SAFE): No patterns involving the execution of remote code or untrusted script downloads were found.
- Evidence: Bash scripts provided for pagination are transparent, locally defined, and use standard utilities for data fetching.
- Dynamic Execution (SAFE): No unsafe dynamic code execution or deserialization detected.
- Evidence: Data transformation logic provided in references utilizes safe, standard parsing methods for blockchain data types.
Audit Metadata