nla-fulfill
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or suspicious behaviors were detected in the skill instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill identifies the 'nla' CLI as a prerequisite (installed via npm). This is the core tool required for the skill's primary function and is considered a legitimate dependency.
- [COMMAND_EXECUTION]: The skill utilizes the 'nla' CLI for protocol interactions. Security is enhanced by the frontmatter configuration which restricts tool access specifically to the 'nla:*' command namespace, preventing arbitrary shell command execution.
- [DATA_EXPOSURE]: While the skill involves blockchain transactions that require a private key, it correctly points to standard environmental variables or CLI configuration methods for secret management rather than hardcoding credentials or attempting unauthorized access.
Audit Metadata