analyzing-on-chain-data
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from
api.llama.fi,yields.llama.fi, andapi.coingecko.com. These are well-known, public cryptocurrency data providers and are considered safe for the skill's primary purpose of on-chain analysis. - [COMMAND_EXECUTION]: The skill relies on running local Python scripts (
onchain_analytics.py, etc.) via the Bash tool. These scripts are included in the skill distribution and perform legitimate data processing tasks. No arbitrary or unsanitized user input is passed to dangerous shell sinks. - [DATA_EXPOSURE]: The skill implements local caching in the user's home directory (
~/.onchain_analytics_cache.json). This is a standard practice for performance and rate-limit compliance and does not expose sensitive user data. - [SAFE]: The code follows best practices for API integration, including modular architecture, error handling, and documentation. No obfuscation, persistence, or privilege escalation patterns were found.
Audit Metadata