maiat-token-safety
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the '@moonpay/cli' package globally using npm. This is a vendor-owned CLI tool utilized for interacting with blockchain services and paid API endpoints.
- [COMMAND_EXECUTION]: The skill uses 'curl' and the 'mp' (MoonPay CLI) command to execute network requests against 'app.maiat.io'. these commands are used to fetch security analysis data for blockchain tokens.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON data from an external API ('app.maiat.io') to provide token safety advice. 1. Ingestion points: API responses from Maiat endpoints as described in SKILL.md. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the API output solely as data. 3. Capability inventory: The agent interprets the 'riskSummary' and 'riskFlags' to advise users on swap safety. 4. Sanitization: No specific validation or filtering of the API-returned text is performed before processing.
Audit Metadata