balance

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx fibx@latest to execute its functionality. This command fetches and runs the latest version of the fibx package from the npm registry. As fibx is a vendor-owned resource for fibrous-finance, this is documented as an external dependency.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute shell commands for checking wallet balances and network status.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) as it processes data from external blockchain sources.
  • Ingestion points: The output of npx fibx@latest balance, which includes token names and other blockchain metadata, is ingested into the agent context.
  • Boundary markers: No delimiters or explicit instructions are provided to the agent to disregard potential instructions embedded in the blockchain data.
  • Capability inventory: The agent has access to the Bash tool, which could be exploited if malicious instructions from token data were obeyed.
  • Sanitization: The skill does not implement validation or sanitization of the data retrieved from the blockchain before presenting it to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 02:36 AM
Security Audit — agent-trust-hub — balance