chainstack
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill instructs the agent to guide users in modifying their shell profiles (
~/.zshrc,~/.bashrc) to persist API keys as environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill consumes untrusted external data from documentation pages (
docs.chainstack.com) and pricing markdown (chainstack.com/pricing.md) to drive workflows, including node deployment and pricing calculations. - Ingestion points: External content fetched via
search_docs,get_doc_page, andget_chainstack_pricinginSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided in the workflow descriptions.
- Capability inventory: Includes node and project management (creation/deletion), testnet faucet requests, and support message submission to HubSpot.
- Sanitization: No evidence of input validation or sanitization for fetched content is described.
- [EXTERNAL_DOWNLOADS]: Recommends that users install the official CLI tool from Alchemy (
@alchemy/cli), a well-known service, to facilitate usage estimation during migration workflows.
Audit Metadata