arkiv-entity-expiration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for ingesting untrusted data from the Arkiv blockchain, which represents a potential attack surface if entity attributes or logs contain instructions.
- Ingestion points: reader.getEntity, reader.select, and receipt.logs in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: wallet.extendEntity (Blockchain transaction submission).
- Sanitization: Relies on SDK-level decoding; lacks explicit sanitization of string-based entity data.
- [EXTERNAL_DOWNLOADS]: References official documentation and SDK source code files from the vendor's domain and the unpkg.com content delivery network.
Audit Metadata