ts-sdk-transactions
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions do not contain any attempts to override safety filters or manipulate agent behavior. The 'ALWAYS' and 'NEVER' sections are standard API usage guidelines.
- [CREDENTIALS_UNSAFE]: No hardcoded private keys, secrets, or API tokens were found. The code examples correctly use object placeholders like 'account' or 'sender' for transaction signing.
- [DATA_EXFILTRATION]: No network exfiltration patterns or sensitive file access were identified. The network operations are limited to standard blockchain interactions via the official SDK.
- [OBFUSCATION]: The skill body and code snippets use clear, human-readable TypeScript. No hidden characters, encoded strings, or homoglyph substitutions were detected.
- [EXTERNAL_DOWNLOADS]: The skill references the official '@aptos-labs/ts-sdk' package, which is the vendor's own resource. No suspicious third-party dependencies or remote script downloads are present.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for transaction data that interpolate variables like function arguments and addresses. This is the primary intended purpose of the skill and does not provide an exploitable surface for command execution or system manipulation.
- [COMMAND_EXECUTION]: The skill does not perform any shell command execution or subprocess spawning.
Audit Metadata