setup-evm-browser-app
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@metamask/connect-evmpackage. This is an official library provided by the author (metamask) for its intended purpose and does not represent a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents how to process data from external blockchain RPC providers, which is an inherent part of decentralized applications.\n - Ingestion points: Data retrieved from external Ethereum RPC methods (e.g.,
eth_getBalance,eth_call) and the dapp URL (window.location.href).\n - Boundary markers: No specific boundary markers are utilized as the skill focuses on API implementation rather than LLM context management.\n
- Capability inventory: The resulting application can perform network requests to RPC nodes and trigger wallet interactions such as chain switching and transaction signing.\n
- Sanitization: The example code correctly uses
.textContentto update the DOM with blockchain data, providing a layer of protection against XSS attacks.
Audit Metadata