helius-openapi-skill
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an OpenAPI schema hosted on GitHub within the holon-run repository. This is used to define the API interface for the uxc tool.
- [COMMAND_EXECUTION]: The skill instructs the agent to use the uxc CLI to create a local link (
helius-openapi-cli) and execute API operations. These operations are scoped to read-only wallet intelligence endpoints. - [CREDENTIALS_SAFE]: Instructions for setting up authentication use
uxc auth credential setwith a reference to an environment variable (HELIUS_API_KEY), which is a secure method for managing secrets. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Helius API (e.g., wallet history, identity). While this data originates from an external source, the skill's instructions emphasize using structured JSON output and provide clear operation scopes to minimize risks from untrusted data ingestion.
Audit Metadata