alchemy-api
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Makes network requests to Alchemy's official domains (eth-mainnet.g.alchemy.com, api.g.alchemy.com, etc.) to retrieve blockchain data. As a well-known service, these references are considered safe for the intended integration.
- [CREDENTIALS_UNSAFE]: Correctly utilizes environment variables ($ALCHEMY_API_KEY) for handling authentication tokens, avoiding the risk of hardcoded secrets.
- [COMMAND_EXECUTION]: Provides boilerplate curl commands for common blockchain tasks such as checking token balances and NFT ownership.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external blockchain APIs which constitutes an ingestion surface for potentially untrusted data. However, the use of structured data from a reputable provider with specific command templates for parsing limits the risk.
Audit Metadata