resolvio
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
curlcommands to interact with the Resolvio API athttps://api.resolvio.xyz. - [DATA_EXFILTRATION]: The skill performs network operations to the external domain
api.resolvio.xyz. While this is core to its functionality, it establishes an external network dependency. - [INDIRECT_PROMPT_INJECTION]: The skill fetches ENS profile data and text records (such as avatars or descriptions) which are controlled by third-party blockchain users. This content can be used to deliver hidden instructions to the agent.
- Ingestion points: Data is ingested through API responses from the
/ens/v2/profile/:nameand/ens/v2/texts/:nameendpoints. - Boundary markers: No boundary markers or 'ignore' instructions are present to prevent the agent from obeying instructions embedded in the record values.
- Capability inventory: The skill uses network operations (
curl) but does not perform file-system writes or dynamic code execution. - Sanitization: No sanitization or validation logic is defined to check the content of retrieved ENS records before processing.
Audit Metadata