agentbox-inference
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://inference.x402.agentbox.fyito access LLM inference services.\n- [EXTERNAL_DOWNLOADS]: The skill specifies a requirement for theopenclawbinary in its metadata.\n- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes user input and sends it to an external LLM, potentially allowing malicious content in model responses to influence the agent.\n - Ingestion points: User content is ingested through the
messagesarray in thex_paymenttool's request body in SKILL.md.\n - Boundary markers: No explicit delimiters or instructions are provided to the model to ignore or isolate instructions contained within the message history.\n
- Capability inventory: The agent context has access to the
x_paymenttool, which can execute financial transactions on the Solana blockchain and perform network requests.\n - Sanitization: The skill lacks mechanisms to sanitize or validate input messages or the responses received from the external inference provider.
Audit Metadata