helium-mcp
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious instructions, obfuscated code, or unauthorized data access patterns were identified in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill connects to an external MCP server endpoint at https://heliumtrades.com/mcp to provide its primary data services. This connection is consistent with the skill's stated purpose of providing news and market analysis.
- [PROMPT_INJECTION]: The skill is a surface for indirect prompt injection because it ingests external news articles and search results. However, the risk is minimal as the skill lacks any capabilities (such as shell access, file system writes, or network transmission from scripts) that could be leveraged by malicious data. Ingestion points: search_news, search_balanced_news, get_article_bias. Boundary markers: Absent. Capability inventory: No dangerous capabilities available. Sanitization: No specific filtering or sanitization logic is described for incoming article data.
Audit Metadata