ethereum-jsonrpc-skill
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Ethereum execution OpenRPC schema from the ethereum/execution-apis GitHub repository to enable command discovery and validation.
- [COMMAND_EXECUTION]: Utilizes the uxc utility to create command-line aliases and manage blockchain event subscriptions. This involves standard shell operations for local environment configuration.
- [DATA_EXFILTRATION]: No exfiltration detected. The skill allows users to specify local file paths (e.g., $HOME/.uxc/subscriptions/) for saving subscription data, which is a standard logging and persistence practice for this toolset.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from Ethereum RPC nodes. While it lacks explicit boundary markers for this untrusted data, its read-only focus and schema-driven execution environment significantly mitigate the risk of data being misinterpreted as instructions.
Audit Metadata