skills/moonpay/skills/dune-analytics/Gen Agent Trust Hub

dune-analytics

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to interact with the Dune Analytics REST API and jq to parse the resulting JSON data. These are standard operations for an analytics agent.
  • [EXTERNAL_DOWNLOADS]: Recommends installing the @moonpay/cli NPM package. As the skill is authored by MoonPay, this is a standard vendor-provided resource for wallet management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data ingested from the external Dune API (on-chain data). Although this data is untrusted, the skill follows best practices by providing instructions to redact API keys and requiring user confirmation for write operations.
  • Ingestion points: API responses from api.dune.com (SKILL.md)
  • Boundary markers: None explicitly mentioned in prompt templates
  • Capability inventory: Network access via curl, local CLI operations via mp (SKILL.md)
  • Sanitization: Instructions included to redact DUNE_API_KEY from outputs
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 05:10 PM