chainlink-ccip-skill
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of essential development tools and libraries from the official vendor, SmartContractKit. This includes npm packages like
@chainlink/ccip-cli,@chainlink/ccip-sdk, and@chainlink/local, as well as smart contract dependencies via Forge. These downloads are necessary for the skill's core functionality and originate from trusted sources. - [COMMAND_EXECUTION]: The skill uses command-line utilities such as
forge,npm, andcastto manage smart contracts and interact with blockchain networks. These operations are conducted within a 'safety-first' workflow that requires explicit user confirmation before any side-effecting command is executed. - [DATA_EXFILTRATION]: The
ccip_sdkMCP tool includes parameters forrpcUrlandbaseUrl, allowing connection to blockchain RPC nodes and CCIP API endpoints. These network operations are strictly functional for retrieving message statuses and on-chain data, with no mechanisms identified for exfiltrating sensitive local files. - [PROMPT_INJECTION]: The skill instructions proactively address potential prompt injection by directing the agent to refuse any requests to bypass its established safety guardrails or mainnet restrictions.
Audit Metadata