quicknode-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external blockchain RPC endpoints which could serve as an attack surface for indirect prompt injection.
- Ingestion points: Data is fetched via the QuickNode RPC provider, such as
provider.getBlockNumber()inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the external data.
- Capability inventory: The skill has access to
WriteandBashtools as defined in the frontmatter. - Sanitization: The provided code snippets do not demonstrate sanitization or validation of the data returned from the external RPC provider.
Audit Metadata