goldrush-foundational-api
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation instructs the user to install official vendor-provided packages from the NPM registry, specifically
@covalenthq/client-sdkand@covalenthq/goldrush-enhanced-spam-lists. These are standard libraries required to interface with the GoldRush API. - [DATA_EXPOSURE]: The skill describes the standard authentication process for the API, which requires the use of an API key in the
Authorizationheader. It correctly identifies this as a sensitive parameter and uses placeholders (YOUR_API_KEY) in examples. - [COMMAND_EXECUTION]: The skill includes example
curlcommands for raw HTTP access to the API endpoints. These commands are informational and intended for direct API interaction. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to process blockchain data returned from the API. It advises on data validation and error handling, following best practices for consuming external data.
Audit Metadata