alchemy-hello-world

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected.- [EXTERNAL_DOWNLOADS]: The skill recommends installing the alchemy-sdk package from npm. Alchemy is a well-known service, and this is its official SDK.- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by using process.env.ALCHEMY_API_KEY in its code examples rather than hardcoding sensitive keys.- [SAFE]: The skill processes external blockchain data such as NFT metadata and token symbols from the Alchemy API. While this untrusted data is interpolated into console output without specific boundary markers or sanitization, the risk of indirect prompt injection is minimal given the skill's purpose as a development template.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 10:41 PM
Security Audit — agent-trust-hub — alchemy-hello-world