pg-sell
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
proxygateCLI tool for all core operations, including project scaffolding (proxygate create), listing management (proxygate listings), and establishing service tunnels (proxygate tunnel). This is the intended behavior for interacting with the ProxyGate platform. - [DATA_EXPOSURE]: The skill accesses sensitive local files, specifically the Solana keypair at
~/.proxygate/keypair.jsonand platform configuration at~/.proxygate/config.json. This access is necessary for authenticating requests and managing financial settlements (USDC balance/withdrawals) on the ProxyGate network. - [EXTERNAL_DOWNLOADS]: The skill references the official ProxyGate gateway at
https://gateway.proxygate.aifor API discovery and management. It also demonstrates the use of the@proxygate/sdkNode.js package, which is the vendor's official library for programmatic integration. - [INDIRECT_PROMPT_INJECTION]: The skill features capabilities that ingest external data, such as viewing API documentation (
proxygate listings docs) and monitoring live request logs in development mode (proxygate dev). While this represents a theoretical attack surface for indirect prompt injection, it is managed within the scope of the agent's interaction with the platform.
Audit Metadata