pg-sell

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the proxygate CLI tool for all core operations, including project scaffolding (proxygate create), listing management (proxygate listings), and establishing service tunnels (proxygate tunnel). This is the intended behavior for interacting with the ProxyGate platform.
  • [DATA_EXPOSURE]: The skill accesses sensitive local files, specifically the Solana keypair at ~/.proxygate/keypair.json and platform configuration at ~/.proxygate/config.json. This access is necessary for authenticating requests and managing financial settlements (USDC balance/withdrawals) on the ProxyGate network.
  • [EXTERNAL_DOWNLOADS]: The skill references the official ProxyGate gateway at https://gateway.proxygate.ai for API discovery and management. It also demonstrates the use of the @proxygate/sdk Node.js package, which is the vendor's official library for programmatic integration.
  • [INDIRECT_PROMPT_INJECTION]: The skill features capabilities that ingest external data, such as viewing API documentation (proxygate listings docs) and monitoring live request logs in development mode (proxygate dev). While this represents a theoretical attack surface for indirect prompt injection, it is managed within the scope of the agent's interaction with the platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 09:48 PM