alchemy-api
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions attempting to override the agent's system prompt or safety guidelines were identified.
- [DATA_EXFILTRATION]: The skill instructs users to use environment variables for API keys and provides a non-printing check to verify their existence safely. Network activity is limited to authorized Alchemy API endpoints for standard blockchain data retrieval.
- [REMOTE_CODE_EXECUTION]: No instructions for downloading or executing arbitrary remote scripts were found. Code examples use standard libraries like the Node.js 'ws' package and built-in modules.
- [OBFUSCATION]: The skill's content is clear and readable. No hidden characters, encoded commands, or homoglyph-based attacks were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill proactively warns that external metadata and URLs from blockchain sources should be treated as untrusted input and provides recommendations for sanitization.
Audit Metadata