skills/blackforge-so/skill/blackforge/Gen Agent Trust Hub

blackforge

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions and scripts (such as scripts/latest-json.sh) facilitate the execution of the blackforge CLI tools to retrieve market snapshots and series data.
  • [EXTERNAL_DOWNLOADS]: The skill dynamically fetches and executes official vendor packages @blackforge-so/mcp and @blackforge-so/cli using npx. It also performs network requests to api.blackforge.so to synchronize the metrics catalog and fetch market data.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted market data originating from various external cryptocurrency exchanges via the BlackForge API.
  • Ingestion points: External data enters the agent context through the blackforge_catalog, blackforge_latest, blackforge_series, and blackforge_symbols tools described in SKILL.md.
  • Boundary markers: The instructions do not define explicit boundary markers or delimiters to wrap external data, though they provide strong behavioral guidelines for the agent to treat outputs as measurements.
  • Capability inventory: The skill possesses the capability to execute shell commands and perform network operations via the provided CLI wrappers and MCP tools.
  • Sanitization: There is no evidence of automated sanitization or filtering applied to the external data fields (like labels or metadata) before presentation to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 02:33 PM