allium-onchain-data
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools such as curl and jq to interact with the Allium API and process responses. These tools are used for their intended purpose in a developer-oriented environment.
- [PERSISTENCE]: The skill maintains session state by storing API keys in a local configuration file (~/.allium/credentials). This is standard behavior for CLI integrations.
- [DATA_EXFILTRATION]: During the registration process, user-provided contact information (name and email) is transmitted to the official Allium API endpoint (api.allium.so). This is a functional requirement for account creation and does not involve harvesting sensitive system data.
- [SAFE]: The skill actively promotes security best practices by instructing the agent to set file permissions to chmod 600, ensuring that sensitive credentials remain private to the current user.
Audit Metadata