gmgn-dev-score
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
dev_score.pyusessubprocess.run()to executegmgn-clicommands. This is standard and expected functionality for a skill designed to interface with a specific CLI tool for blockchain data analysis. - [EXTERNAL_DOWNLOADS]: The skill instructions provide guidance on installing the
gmgn-clitool vianpm install -g gmgn-cliif it is not found. This is a common and legitimate practice for skills requiring specific local binaries to function. - [SAFE]: The skill uses a strict sanitization function (
safe()) to clean all attacker-controlled strings (like token symbols or wallet addresses) before they are included in output, preventing potential prompt injection or terminal escape sequences. It also follows least-privilege principles by requesting only the specific CLI tools it needs for data gathering.
Audit Metadata