birdeye
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill depends on standard Node.js packages (@solana/web3.js, @x402/fetch, and ws) to provide blockchain connectivity and real-time data streaming.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection due to processing external data from the Birdeye API. 1. Ingestion points: Data arrives from public-api.birdeye.so via REST and WebSocket endpoints. 2. Boundary markers: Not explicitly used in the instruction templates. 3. Capability inventory: The skill can perform complex financial analysis and interact with Solana wallets. 4. Sanitization: No explicit content filtering is implemented for API responses. This is a low-risk finding associated with the skill's primary function.
- [SAFE]: The skill securely handles sensitive data, such as BIRDEYE_API_KEY and SOLANA_PRIVATE_KEY, by loading them from environment variables rather than hardcoding them, adhering to standard security practices.
Audit Metadata