tools
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several libraries and tools from well-known and reputable sources.
- Fetches the x402 SDK (HTTP payments protocol) from Coinbase's official repositories across TypeScript, Python, and Go ecosystems.
- Uses
npx create-eth@latestto bootstrap projects using the Scaffold-ETH 2 toolkit, a standard community practice. - Provides links to established blockchain infrastructure providers including Alchemy, Infura, QuickNode, and Blockscout.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs agents to use the Blockscout MCP server and various RPC providers to read blockchain data. This creates a surface where untrusted data from the Ethereum blockchain could be brought into the agent's context.
- Ingestion points: Blockscout MCP server,
cast callresults, and Etherscan-compatible APIs. - Boundary markers: The documentation does not specify explicit delimiters or "ignore instructions" warnings for the ingested data.
- Capability inventory: The agent is provided with capabilities for file system modification (creating projects), network operations (RPC calls), and command execution (Foundry/Hardhat toolsets).
- Sanitization: No specific sanitization or filtering strategies are mentioned for the incoming blockchain data.
Audit Metadata