metaplex
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
mplxCLI to perform blockchain operations, including asset creation, transfers, and wallet management on the Solana network. - [DYNAMIC_EXECUTION]: Provides functionality to execute arbitrary Base64-encoded blockchain instructions via the
mplx toolbox transactioncommand and equivalent SDK methods, allowing the agent to perform any on-chain action supported by the underlying protocols. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface by processing data from untrusted external sources.
- Ingestion points: Processes NFT and token metadata in JSON format from local files and remote URIs (Arweave/Irys) as documented in
metadata-json.md,cli-core.md, andsdk-umi.md. - Boundary markers: Absent; there are no instructions or delimiters defined to prevent the agent from obeying instructions embedded within the metadata fields (e.g., name, description).
- Capability inventory: High-privilege capabilities including the ability to transfer funds, burn assets, modify collection settings, and execute raw transactions.
- Sanitization: Absent; the skill does not specify sanitization or validation logic for data ingested from external URIs before it is used to influence agent decisions.
- [EXTERNAL_DOWNLOADS]: Fetches the Metaplex CLI and various official SDK packages from established registries like NPM. These downloads originate from the official Metaplex Foundation and Solana organizations.
Audit Metadata