query
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute the panda CLI tool to perform blockchain infrastructure queries and data discovery. This is the primary intended function of the skill and uses the vendor's own command-line interface.
- [INDIRECT_PROMPT_INJECTION]: The skill has the surface area to ingest external, untrusted data including Ethereum blockchain data, OpenTelemetry logs, and Prometheus metrics. 1. Ingestion points: External blockchain data, OTel logs, and metrics retrieved via the panda CLI or MCP tools (SKILL.md). 2. Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions in the retrieved data are present. 3. Capability inventory: The skill utilizes shell command execution via the panda CLI and Python code execution via the execute_python tool (SKILL.md). 4. Sanitization: No explicit data sanitization or validation logic is defined within the instructions.
Audit Metadata