query-onchain-data
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses 'npx' to download and run the 'awal' package. This utility is an official tool from the vendor (Coinbase) used for blockchain interactions.
- [COMMAND_EXECUTION]: Executes shell commands via 'Bash' to interface with the SQL API. The instructions include robust input validation steps, such as regex for addresses and single-quoting SQL strings, to mitigate shell injection risks.
- [SAFE]: Network requests are directed to 'x402.cdp.coinbase.com', which is a verified infrastructure endpoint owned by the skill's author.
Audit Metadata