skills/lightprotocol/skills/testing/Gen Agent Trust Hub

testing

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the Photon indexer source code and binaries from the Light Protocol GitHub repository and Helius infrastructure.
  • Evidence: cargo install --git https://github.com/lightprotocol/photon.git in references/local.md and prover binary locations in ~/.config/light/bin/.
  • [COMMAND_EXECUTION]: The skill utilizes standard development tools and vendor-specific CLIs to manage test environments and execute program tests.
  • Evidence: Usage of light test-validator, cargo test-sbf, and pnpm test-validator across SKILL.md and references/local.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill utilizes the HELIUS_API_KEY environment variable to authenticate RPC requests to external providers.
  • Ingestion points: HELIUS_API_KEY environment variable (declared in SKILL.md frontmatter).
  • Boundary markers: The skill instructs the agent to use AskUserQuestion to resolve ambiguities before execution.
  • Capability inventory: The agent has access to shell commands (light, cargo, node) and file system operations.
  • Sanitization: Not explicitly implemented, but the API key is used within template strings for RPC URLs as standard practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 01:37 PM