chainlink-cre-skill
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources which could contain malicious instructions.
- Ingestion points: External documentation fetched via WebFetch, HTTP/RPC responses, and CLI command outputs as specified in Guardrail 12.
- Boundary markers: Guardrail 12 explicitly instructs the agent to treat these sources as untrusted data and to ignore any instructions within them that request credential access or changes to security rules.
- Capability inventory: The skill utilizes
Bashfor CLI operations,WebFetchfor remote data retrieval, andWrite/Editfor file system modifications. - Sanitization: The skill relies on behavioral instructions (Guardrail 12) to filter out and ignore embedded instructions in external content rather than technical sanitization.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to interact with thecrecommand-line interface. - Evidence: Instructions include running
cre init,cre workflow simulate, andcre login. - Safety Measures: Guardrail 11 prevents the automation of account creation, and Guardrail 3 explicitly forbids mainnet deployment operations, requiring simulation before any testnet actions.
Audit Metadata