dojo-indexer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to manage development services.
- Executes
toriito start the indexer and configure GraphQL/gRPC APIs. - Utilizes
slotCLI for authentication and remote deployments to the Cartridge platform. - Runs
sozoandkatanafor local development workflow management. - [INDIRECT_PROMPT_INJECTION]: The skill configures a system that ingests external data, creating a potential surface for indirect injection.
- Ingestion points: Watches blockchain events, indexes model state changes, and processes GraphQL queries.
- Boundary markers: None explicitly defined in the provided instructions to separate external data from agent instructions.
- Capability inventory: Includes file system writes (
--db-dir), network API hosting, and execution of shell commands through the Dojo toolchain. - Sanitization: Relies on the internal validation logic of the Torii indexer and underlying database.
Audit Metadata