dojo-token
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the 'origami' token library from the dojoengine organization's official GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including token names, symbols, and transfer events from the blockchain via Torii indexing, which serves as an untrusted input surface.
- Ingestion points: Blockchain event data (Transfers, Minting) and token metadata ingested by the Torii indexer and retrieved via SQL or the JavaScript SDK in SKILL.md.
- Boundary markers: None explicitly defined in the provided Cairo code or SDK examples for handling external strings.
- Capability inventory: React components for displaying token data and SQL queries for data retrieval.
- Sanitization: Not demonstrated in the provided code snippets for rendering token metadata.
Audit Metadata