cardano-mcp-transactions
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted transaction data (CBOR hex) from external sources such as dApp APIs, local files, or previous agent steps.\n
- Ingestion points: The
cborinput parameter of thesubmit_transactiontool described inSKILL.md.\n - Boundary markers: The skill mandates a structured preview block and requires an unambiguous confirmation cycle (Rules 1, 2, and 3) before any transaction is signed.\n
- Capability inventory: The skill uses the
submit_transactiontool to sign and broadcast data to the Cardano blockchain through an MCP server with a configured wallet.\n - Sanitization: Rule 4 enforces a 'fail closed' policy, requiring the agent to decode the CBOR and verify the network, source wallet, and transaction details before presentation to the user.
Audit Metadata