alchemy-hello-world
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected.- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
alchemy-sdkpackage from npm. Alchemy is a well-known service, and this is its official SDK.- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by usingprocess.env.ALCHEMY_API_KEYin its code examples rather than hardcoding sensitive keys.- [SAFE]: The skill processes external blockchain data such as NFT metadata and token symbols from the Alchemy API. While this untrusted data is interpolated into console output without specific boundary markers or sanitization, the risk of indirect prompt injection is minimal given the skill's purpose as a development template.
Audit Metadata