base-blockchain

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to established services necessary for its stated functionality.
  • Fetches blockchain data from the official Base RPC endpoint at https://mainnet.base.org and its testnet equivalent.
  • Retrieves cryptocurrency market pricing from the CoinGecko public API at https://api.coingecko.com.
  • These connections are to well-known infrastructure providers and do not involve untrusted third-party servers.
  • [INDIRECT_PROMPT_INJECTION]: As the skill processes data from external APIs, it inherently possesses a surface for indirect prompt injection if those sources were compromised.
  • Ingestion points: JSON responses from the rpc_call and get_eth_price_usd functions defined in SKILL.md.
  • Boundary markers: No specific delimiters or safety instructions are included in the provided code snippets to distinguish remote data from agent instructions.
  • Capability inventory: The skill utilizes urllib.request for network communications and JSON parsing.
  • Sanitization: No sanitization or validation of the remote content is performed beyond standard JSON decoding.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 08:06 AM