gmgn-contract-dd
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external token metadata such as
name,symbol, andlogovalues which are set by token deployers and can contain malicious instructions. - Ingestion points: Metadata fields retrieved via
gmgn-cli token info,security,trenches, andtrendingcommands. - Boundary markers: The skill documentation notes that
gmgn-clisanitizes output by stripping control, zero-width, and bidi characters, and replaces suspicious text with the literal[filtered]string. - Capability inventory: The skill executes shell commands via
gmgn-cliandpython3but limits operations to read-only API calls and data filtering. - Sanitization: Relies on
gmgn-clibuilt-in sanitization and provides explicit instructions to the AI agent to treat string values as data only and ignore any embedded instructions. - [DYNAMIC_EXECUTION]: The skill uses
python3 -cto execute localized scripts for filtering and parsing JSON data received fromgmgn-clicommand pipelines (found in Step 5B). - [COMMAND_EXECUTION]: The skill executes multiple sub-commands of
gmgn-cliand utility commands likeifconfigorip addrfor network troubleshooting. - [EXTERNAL_DOWNLOADS]: The instructions prompt the user to install or update the
gmgn-clitool usingnpm install -g gmgn-cliif version issues are detected.
Audit Metadata