portal-query
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-structured documentation resource for interacting with the SQD (Subsquid) blockchain data platform. It uses standard HTTP POST requests to the official
portal.sqd.devdomain to retrieve blockchain data. - [EXTERNAL_DOWNLOADS]: The documentation recommends the use of the
@subsquid/solana-typegenNode.js package. This is a legitimate utility provided by the vendor (Subsquid) to facilitate the development of Solana-based indexers and is consistent with the skill's purpose. - [PROMPT_INJECTION]: The skill involves fetching untrusted blockchain data (such as transaction inputs or logs) into the agent's context, which constitutes an indirect prompt injection surface. However, the skill treats this data as structured information for analysis and does not contain any instructions that would lead to the execution of commands embedded in that data.
- [COMMAND_EXECUTION]: The skill includes
curlcommand examples in the documentation to demonstrate how to interact with the Portal API. These commands are benign, use theBashtool as authorized in the skill metadata, and are restricted to the vendor's trusted infrastructure.
Audit Metadata