web3-data
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill operates primarily by orchestrating shell commands through the
chainbaseCLI to query on-chain analytics, such as token holders, balances, and transaction history. - [EXTERNAL_DOWNLOADS]: The skill requires the external installation of the
chainbase-cliNode.js package to function as the bridge between the agent and the Chainbase API services. - [PROMPT_INJECTION]: The skill processes data from untrusted external sources, including blockchain logs and social media posts, which constitutes a surface for indirect prompt injection.
- Ingestion points: CLI output from commands like
chainbase token transfers,chainbase tops posts, andchainbase tops mentions(referenced in SKILL.md and tops-api.md). - Boundary markers: The skill does not define specific delimiters to isolate external data from the agent's instructions.
- Capability inventory: The agent can execute system commands via the
chainbaseCLI and perform SQL queries against remote datasets. - Sanitization: There is no evidence of sanitization or validation of the data retrieved from external APIs before it is presented to the agent context.
Audit Metadata