send-usdc
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to use
npx awal@latest, which downloads and executes the latest version of the 'awal' package from the npm registry at runtime. This allows for the execution of remote code during the transaction process. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input for transaction amounts and recipients, which are interpolated directly into command arguments.
- Ingestion points: The
amountandrecipient(address or ENS name) variables are ingested from user instructions inSKILL.md. - Boundary markers: There are no boundary markers or delimiters provided to separate user-supplied content from the executable command structure.
- Capability inventory: The skill possesses the capability to perform blockchain transactions and modify wallet state using the
npx awal@latest sendcommand. - Sanitization: The instructions do not define any sanitization, regex validation, or escaping logic for the user-supplied strings before they are passed to the shell.
Audit Metadata