moralis-streams-api

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to perform network operations against api.moralis-streams.com. These requests are necessary for the primary functionality of managing blockchain event streams and interact with a well-known service provider.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides the infrastructure to ingest external blockchain data via webhooks, which constitutes an attack surface for indirect prompt injection.
  • Ingestion points: Data is received from blockchain events via the Moralis Streams API, as documented in references/WebhookResponseBody.md.
  • Boundary markers: The instructions do not specify explicit delimiters or "ignore" instructions for the data payloads received, though it emphasizes signature verification for security.
  • Capability inventory: The skill has access to Bash for network calls (curl) and file system access through Read, Grep, and Glob tools.
  • Sanitization: The instructions focus on signature verification for authenticity but do not detail sanitization of the content within the event payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:31 PM