dune-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Dune Analytics REST API andjqto parse the resulting JSON data. These are standard operations for an analytics agent. - [EXTERNAL_DOWNLOADS]: Recommends installing the
@moonpay/cliNPM package. As the skill is authored by MoonPay, this is a standard vendor-provided resource for wallet management. - [INDIRECT_PROMPT_INJECTION]: The skill processes data ingested from the external Dune API (on-chain data). Although this data is untrusted, the skill follows best practices by providing instructions to redact API keys and requiring user confirmation for write operations.
- Ingestion points: API responses from
api.dune.com(SKILL.md) - Boundary markers: None explicitly mentioned in prompt templates
- Capability inventory: Network access via
curl, local CLI operations viamp(SKILL.md) - Sanitization: Instructions included to redact
DUNE_API_KEYfrom outputs
Audit Metadata