arkiv-first-write
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official dependencies
@arkiv-network/sdkandviemfrom the npm registry. These are legitimate resources provided by the vendor for the skill's primary functionality. - [COMMAND_EXECUTION]: Provides standard shell commands for setting up a development environment and managing project dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill queries entity data from the blockchain, which is an ingestion point for external, potentially untrusted data.
- Ingestion points: Data retrieved from the blockchain via
publicClient.fetch()inSKILL.md. - Boundary markers: None.
- Capability inventory: Includes the ability to perform authenticated blockchain write operations via
walletClient.createEntity. - Sanitization: The implementation includes byte-level payload verification (
matchesfunction) to ensure retrieved data exactly matches expected application state before proceeding.
Audit Metadata