onchain-automation
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill outlines architectures that ingest untrusted external data which is then used to perform onchain actions, creating a potential indirect prompt injection surface.
- Ingestion points: Untrusted data enters the system through
onchain_eventtriggers or Turbo Webhook sinks (SKILL.md). - Boundary markers: No specific prompt boundary markers are prescribed for the agent when handling this data.
- Capability inventory: The system uses
wallet.writeContractandsendTransactionfor onchain execution (SKILL.md). - Sanitization: The skill provides proactive security guidance, instructing the developer to "decode and validate before acting" on incoming webhook bodies (SKILL.md).
- [SAFE]: The instruction to correct technical misconceptions about Goldsky's execution capabilities is a matter of factual accuracy for the product's scope and is not an attempt to conceal malicious activity or bypass safety filters.
Audit Metadata