envio
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references official vendor packages such as
@envio-dev/hypersync-clientfor Node.js andhypersyncfor Python. These are legitimate tools for interacting with the Envio service. - [COMMAND_EXECUTION]: The skill mentions standard CLI commands for the Envio platform, including
pnpx envio init,pnpm codegen, andpnpm dev. These are expected build and development tasks for blockchain indexing. - [CREDENTIALS_UNSAFE]: The instructions discuss the use of
ENVIO_API_TOKEN. It explicitly recommends security best practices, such as using environment variables and excluding secrets from version control, though it notes the service's use of tokens in URL paths for certain RPC calls.
Audit Metadata