flare-general
Fail
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges that data from RPC endpoints and block explorers is untrusted and provides explicit instructions to developers to validate and decode such data before use. It documents the attack surface where external blockchain data is ingested into applications.\n- [EXTERNAL_DOWNLOADS]: The documentation references official Flare Foundation repositories on GitHub and well-known third-party services like LayerZero, QuickNode, and Ankr. These references are used for legitimate setup and integration purposes.\n- [COMMAND_EXECUTION]: The guides provide standard command-line instructions for environment setup, including package management (npm, pip, cargo) and repository cloning (git clone). These are presented as educational examples for the developer to follow.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata