onchain-monitor
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands for configuration management and data processing. It implements robust input validation, such as verifying blockchain addresses against a strict hex regex (^0x[0-9a-f]{40}$) and checking chain names against a whitelist.
- [CREDENTIALS_SAFE]: API keys are handled using the platform's native secret management system (placeholders like {ALCHEMY_API_KEY}), preventing credentials from appearing in command logs or process lists.
- [EXTERNAL_DOWNLOADS]: Data is fetched from well-known and trusted providers including Alchemy, Etherscan, and CoinGecko. The skill handles API fallbacks correctly and treats fetched fields as untrusted data.
- [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration. The skill only communicates with specified blockchain API providers and the user notification tool.
Audit Metadata