helius-api
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs standard Python dependencies
httpxandpython-dotenvfrom the official Python Package Index (PyPI) to handle network requests and environment configuration. - [DATA_EXFILTRATION]: Communicates with official Helius API endpoints (
mainnet.helius-rpc.comandapi-mainnet.helius-rpc.com) to retrieve Solana blockchain data. The skill correctly manages the API key via environment variables rather than hardcoding credentials. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by retrieving and displaying unvalidated content from the Solana blockchain, such as token descriptions and transaction metadata.
- Ingestion points:
scripts/token_lookup.py(retrieving token metadata via the DAS API) andscripts/wallet_analysis.py(retrieving transaction descriptions via the Enhanced Transactions API). - Boundary markers: No specific delimiters or "ignore instructions" warnings are applied to the displayed blockchain content.
- Capability inventory: The scripts are limited to fetching data via
httpxand printing to the console; no dangerous capabilities such as file system modifications, arbitrary command execution, or system-level access are present. - Sanitization: Data retrieved from the blockchain is printed directly to stdout without sanitization or HTML/markdown escaping.
Audit Metadata