base-blockchain
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to established services necessary for its stated functionality.
- Fetches blockchain data from the official Base RPC endpoint at
https://mainnet.base.organd its testnet equivalent. - Retrieves cryptocurrency market pricing from the CoinGecko public API at
https://api.coingecko.com. - These connections are to well-known infrastructure providers and do not involve untrusted third-party servers.
- [INDIRECT_PROMPT_INJECTION]: As the skill processes data from external APIs, it inherently possesses a surface for indirect prompt injection if those sources were compromised.
- Ingestion points: JSON responses from the
rpc_callandget_eth_price_usdfunctions defined inSKILL.md. - Boundary markers: No specific delimiters or safety instructions are included in the provided code snippets to distinguish remote data from agent instructions.
- Capability inventory: The skill utilizes
urllib.requestfor network communications and JSON parsing. - Sanitization: No sanitization or validation of the remote content is performed beyond standard JSON decoding.
Audit Metadata