moralis-streams-api
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto perform network operations againstapi.moralis-streams.com. These requests are necessary for the primary functionality of managing blockchain event streams and interact with a well-known service provider. - [INDIRECT_PROMPT_INJECTION]: The skill provides the infrastructure to ingest external blockchain data via webhooks, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Data is received from blockchain events via the Moralis Streams API, as documented in
references/WebhookResponseBody.md. - Boundary markers: The instructions do not specify explicit delimiters or "ignore" instructions for the data payloads received, though it emphasizes signature verification for security.
- Capability inventory: The skill has access to
Bashfor network calls (curl) and file system access throughRead,Grep, andGlobtools. - Sanitization: The instructions focus on signature verification for authenticity but do not detail sanitization of the content within the event payloads.
Audit Metadata