near-intents
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a comprehensive developer guide for the NEAR Intents 1Click API, providing code examples that adhere to standard security practices.
- [EXTERNAL_DOWNLOADS]: The skill instructions include installation of official vendor SDKs and well-known third-party blockchain libraries, such as
@defuse-protocol/one-click-sdk-typescript,viem,wagmi,@solana/web3.js, and@stellar/stellar-sdk. These are documented as necessary dependencies for the protocol's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of token data and transaction status from the 1Click API to drive agent decision-making during swaps.
- Ingestion points: Data is ingested from the API base at
https://1click.chaindefuser.comas seen inrules/api-tokens.mdandrules/api-status.md. - Boundary markers: The skill follows standard technical integration patterns; explicit prompt-level delimiters are not utilized for the API data processing.
- Capability inventory: The skill provides the agent with the ability to initiate network requests and prepare cryptocurrency transactions for signing across various networks.
- Sanitization: The skill relies on standard validation provided by established cryptographic libraries (e.g.,
viem,wagmi) to ensure the integrity of transaction parameters.
Audit Metadata