alchemy-api
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides extensive documentation and integration recipes for Alchemy's blockchain APIs. All network references target legitimate, vendor-owned domains (alchemy.com).
- [SAFE]: The credential provisioning flow (CLI bridge) correctly handles sensitive API keys by persisting them to .env files, ensuring they are added to .gitignore, and explicitly instructing the agent never to surface the raw key values in conversation output.
- [SAFE]: The documentation includes proactive security advice, such as treating NFT metadata as untrusted input and implementing signature verification for webhooks.
- [SAFE]: Automated project setup steps (using sed and echo to manage environment variables) are standard developer workflows and do not exhibit malicious patterns or privilege escalation.
Audit Metadata