helius
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an official technical resource and library of best-practice examples for developers building on the Solana blockchain using Helius services.
- [EXTERNAL_DOWNLOADS]: The documentation and setup templates guide users to install standard development packages including
helius-sdkand various@solana/*libraries. These are recognized official tools for the Solana ecosystem. - [PROMPT_INJECTION]: The skill facilitates the ingestion and processing of data retrieved from the Solana blockchain (e.g., NFT metadata, transaction logs, and descriptions), which is externally controlled and presents a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested through Helius DAS API, Enhanced Transaction API, and WebSocket notifications in
resources/das-api.mdandresources/enhanced-apis.md. - Boundary markers: The code templates do not explicitly include delimiters or instructions to ignore embedded commands within the retrieved blockchain data.
- Capability inventory: The skill provides the logic for signing and sending blockchain transactions, which are high-privilege operations (
examples/send-transactions/README.md). - Sanitization: The provided examples do not demonstrate explicit sanitization or validation of content fetched from the blockchain.
Audit Metadata