thegraph

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several official packages and tools related to The Graph protocol, such as @graphprotocol/graph-cli, @graphprotocol/graph-ts, and matchstick-as. These are standard, well-known libraries in the blockchain development community.
  • [COMMAND_EXECUTION]: Documentation includes instructions for using the Graph CLI (graph init, graph codegen, graph build, graph deploy, graph test). These are legitimate developer workflow commands and do not involve unauthorized or hidden execution.
  • [CREDENTIALS_UNSAFE]: The documentation correctly advises on secure API key management, recommending the use of environment variables or secret managers instead of hardcoding credentials in client-side code.
  • [PROMPT_INJECTION]: No patterns attempting to override agent behavior or bypass safety filters were found. The content is strictly technical and instructional.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 07:43 PM
Security Audit — agent-trust-hub — thegraph