skills/helius-labs/core-ai/helius/Gen Agent Trust Hub

helius

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation recommends the installation of the Helius MCP server and Helius CLI using npx (helius-mcp@2.1.0, helius-cli@latest). These are official vendor packages used for project setup and blockchain interaction.
  • [COMMAND_EXECUTION]: The onboarding and setup workflows involve executing CLI commands for generating Solana keypairs (helius keygen) and managing Helius account subscriptions (helius signup). These operations are essential for the skill's primary purpose and are performed using official Helius tools. Additionally, an installation script (install.sh) is provided to deploy the skill files locally.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface for blockchain data, which is an inherently untrusted source. Malicious data could theoretically be embedded in transaction metadata or NFT descriptions processed by the agent. However, the risk is minimized by the use of structured JSON APIs and the skill's focus on developer-centric infrastructure tasks.
  • Ingestion points: Blockchain transaction data and NFT metadata fetched via the DAS and Enhanced Transactions APIs (referenced in references/das.md and references/enhanced-transactions.md).
  • Boundary markers: The skill architecture relies on structured API responses rather than raw text interpolation, providing clear boundaries for the agent's context.
  • Capability inventory: The skill allows for network communication with Helius endpoints, file system writes for local keypair storage (~/.helius/keypair.json), and the generation/signing of blockchain transactions.
  • Sanitization: The skill promotes the use of the Helius SDK and typed requests, which helps ensure data is handled as structured objects rather than executable instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 12:07 AM