balance
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx fibx@latestto execute its functionality. This command fetches and runs the latest version of thefibxpackage from the npm registry. Asfibxis a vendor-owned resource for fibrous-finance, this is documented as an external dependency. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute shell commands for checking wallet balances and network status. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) as it processes data from external blockchain sources.
- Ingestion points: The output of
npx fibx@latest balance, which includes token names and other blockchain metadata, is ingested into the agent context. - Boundary markers: No delimiters or explicit instructions are provided to the agent to disregard potential instructions embedded in the blockchain data.
- Capability inventory: The agent has access to the
Bashtool, which could be exploited if malicious instructions from token data were obeyed. - Sanitization: The skill does not implement validation or sanitization of the data retrieved from the blockchain before presenting it to the agent.
Audit Metadata