injective-trading-account
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation and configuration files. It does not contain any executable scripts (Python, JavaScript, shell, etc.) or binary files.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install its core functionality and dependencies from external sources.
- Evidence: The README.md and SKILL.md files provide
npx skills addcommands to fetch resources from the InjectiveLabs/agent-skills repository. These resources belong to a trusted vendor. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that processes external data from the Injective blockchain, which creates a theoretical indirect injection surface.
- Ingestion points: Data is ingested from the blockchain via tools like
account_balances,account_positions, andtoken_metadata. - Boundary markers: The instructions do not define explicit delimiters to separate blockchain-sourced strings (like token names or symbols) from agent instructions.
- Capability inventory: The skill instructs the agent to invoke the
subaccount_deposittool to execute transactions based on the queried data. - Sanitization: There are no specific sanitization steps provided for strings retrieved from the blockchain APIs.
Audit Metadata