sodax-dapp-kit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install necessary dependencies such as @sodax/dapp-kit, @tanstack/react-query, and @sodax/wallet-sdk-react from public Node.js package registries.
- [COMMAND_EXECUTION]: The migration guides provide shell commands using utilities like find, xargs, sed, and grep. These are provided as legitimate developer tools to automate the replacement of deprecated constants and hook signatures in the user's local source code during the migration from v1 to v2.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including user-provided addresses, amounts, and blockchain transaction results. It mitigates injection risks by using structured object parameters (params, queryOptions) and strong typing, ensuring that external data is handled as data rather than executable instructions.
- [SAFE]: The skill serves a purely instructional purpose for a legitimate blockchain integration project. It does not access sensitive files, perform unauthorized network requests, or attempt to bypass agent safety protocols.
Audit Metadata