1inch-infrastructure

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a theoretical attack surface for indirect prompt injection as it processes external data from blockchain RPC responses and domain lookups. However, this is inherent to its intended purpose as a Web3 infrastructure interface.
  • [DATA_EXPOSURE]: The skill facilitates sending raw transaction data to the 1inch Transaction Gateway. This behavior is documented and aligns with the stated goal of broadcasting signed transactions.
  • [SAFE]: The skill utilizes the 1inch MCP 'product_api' tool and accesses internal guidance documents via a local file protocol ('file://1inch-mcp/guides/api-index'). These operations are limited to the vendor's own environment and discovery mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:38 AM