portal-query

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a well-structured documentation resource for interacting with the SQD (Subsquid) blockchain data platform. It uses standard HTTP POST requests to the official portal.sqd.dev domain to retrieve blockchain data.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends the use of the @subsquid/solana-typegen Node.js package. This is a legitimate utility provided by the vendor (Subsquid) to facilitate the development of Solana-based indexers and is consistent with the skill's purpose.
  • [PROMPT_INJECTION]: The skill involves fetching untrusted blockchain data (such as transaction inputs or logs) into the agent's context, which constitutes an indirect prompt injection surface. However, the skill treats this data as structured information for analysis and does not contain any instructions that would lead to the execution of commands embedded in that data.
  • [COMMAND_EXECUTION]: The skill includes curl command examples in the documentation to demonstrate how to interact with the Portal API. These commands are benign, use the Bash tool as authorized in the skill metadata, and are restricted to the vendor's trusted infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 11:12 PM