dune-analytics
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
@moonpay/cliNode.js package from the official NPM registry for wallet operations. - [COMMAND_EXECUTION]: Employs
curlfor making HTTP requests to the Dune API,jqfor processing JSON results, and thempcommand-line interface for blockchain wallet management (creating, funding, and bridging). - [DATA_EXFILTRATION]: Transmits requests to
https://api.dune.comto execute SQL queries and retrieve on-chain data. This communication is consistent with the skill's stated purpose of providing blockchain analytics. - [CREDENTIALS_UNSAFE]: Guides users to set up a
DUNE_API_KEYas an environment variable. While this involves an API key, the instruction follows standard development practices for credential management in shell environments.
Audit Metadata