arkiv-indexing
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
arkiv-syncpackage and components of the Arkiv SDK hosted onunpkg.comand GitHub. These links are provided for version verification, protocol auditing, and implementation guidance, following standard developer practices for the platform. - [DYNAMIC_EXECUTION]: The
OwnedMirrorclass inreferences/checkpoint-mirror.mdimplements a custom state serialization and restoration system (pack/unpack). This mechanism is used to persist the indexer's local state and rollback journal. The implementation is highly defensive, employing recursive type checks, regex-based validation for identifiers, and structural integrity checks to prevent unsafe deserialization of local data. - [INDIRECT_PROMPT_INJECTION]: The skill defines a data indexing surface that processes external blockchain logs.
- Ingestion points: Data is ingested via
client.getLogsandclient.selectwithin thereadNativeBlockandreadMarketplaceRowAtfunctions. - Boundary markers: The logic uses structured ABI decoding and strongly-typed SDK queries to establish clear boundaries between untrusted log data and the application projection.
- Capability inventory: The skill manages an internal state projection and does not expose high-risk capabilities such as arbitrary command execution or network exfiltration based on ingested content.
- Sanitization: The reference implementation performs rigorous schema and type validation on all incoming and restored data points to ensure they conform to the expected format.
- [SAFE]: The skill demonstrates a strong commitment to security best practices, including canonical chain identity verification, atomic commitment of state updates, and clear warnings regarding the scope of application-side authorization. No malicious behavior or evasion techniques were detected.
Audit Metadata