injective-trading-chain-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch source code from the official Injective protocol repository on GitHub for analysis. This is a legitimate vendor resource used for the skill's primary function.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external source code, creating an attack surface for indirect prompt injection via malicious comments. However, the skill is limited to analysis and lacks dangerous capabilities, mitigating the risk.\n
- Ingestion points: Remote and local Go source files from the injective-core repository.\n
- Boundary markers: The skill instructions do not define specific delimiters or instructions to ignore embedded prompts within the analyzed source code.\n
- Capability inventory: The skill is scoped to analysis and explanation, with no file-writing or network-exfiltration tools triggered by the analysis.\n
- Sanitization: No explicit sanitization or filtering of the ingested source code is performed before analysis.
Audit Metadata