xion-asset

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates NFT operations by executing local xion-toolkit CLI commands. The implementation in create.sh, mint.sh, and predict.sh utilizes array-based command execution, which is a secure method to prevent shell command injection by ensuring parameters are treated as literal arguments rather than executable code.
  • [COMMAND_EXECUTION]: The batch-mint.sh and query.sh scripts process external data sources, including JSON files and blockchain contract outputs. These interactions are managed through the CLI tool's structured interface.
  • [SAFE]: Comprehensive analysis of the scripts, schemas, and metadata confirms the absence of malicious patterns such as credential exfiltration, obfuscation, or unauthorized network access. The skill correctly relies on pre-authenticated sessions managed by other skills in the vendor's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 04:18 AM
Security Audit — agent-trust-hub — xion-asset