evm
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access were identified. The skill's functionality is strictly limited to read-only blockchain queries and is consistent with its stated purpose.- [EXTERNAL_DOWNLOADS]: The skill fetches data from established and legitimate public services, including blockchain RPC nodes for various chains (Ethereum, BSC, Base, etc.) and APIs such as CoinGecko for pricing, ensideas.com for ENS resolution, and 4byte.directory for transaction decoding. These are standard resources for blockchain development and do not involve the execution of remote code.- [COMMAND_EXECUTION]: The skill executes a local Python helper script (
evm_client.py) to interface with blockchain RPCs. The script uses the Python standard library and contains no arbitrary shell execution or user-input injection vulnerabilities.- [DATA_EXFILTRATION]: No unauthorized data exfiltration risks were detected. Network activity is confined to fetching blockchain-related information from the configured RPCs and specified public APIs.
Audit Metadata