uniswap-v4-subgraph
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests via
curltogateway.thegraph.comto fetch Uniswap v4 analytics. These requests target a well-known infrastructure provider and are necessary for the skill's primary functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external blockchain indexers, which presents a surface for indirect prompt injection. However, the risk is minimal as the skill is limited to read-only data retrieval.
- Ingestion points: GraphQL query results from
gateway.thegraph.comas documented inSKILL.mdandreferences/v4-queries.md. - Boundary markers: None identified; external data is interpolated into the agent's context without explicit delimiters.
- Capability inventory: The skill uses
curlfor network data retrieval across both instruction files. - Sanitization: No specific sanitization or filtering of the GraphQL response content is documented.
Audit Metadata