hedera-consensus-service
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides standard documentation and code examples for the Hedera Consensus Service using official libraries.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill adheres to security best practices by instructing users to load sensitive credentials like
OPERATOR_IDandOPERATOR_KEYfrom environment variables (process.env) rather than hardcoding them in the scripts. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for subscribing to external message streams via
TopicMessageQuery. While this ingests untrusted data from the Hedera network, the provided examples treat this data as log content or structured JSON for local processing, with no evidence of unsafe execution or sink patterns that would facilitate an attack.
Audit Metadata