openverse-dev

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements strong security guardrails (W009 and W011) that require explicit user approval for transactions and mandate treating all on-chain data as untrusted input. These instructions mitigate common AI agent risks such as unauthorized fund transfers and indirect prompt injection.
  • [SAFE]: Toolchain installation procedures for Agave and Surfpool use a 'download then execute' pattern but correctly advise the operator to inspect and verify the integrity of scripts before running them, rather than piping them directly to a shell.
  • [SAFE]: All identified external repository links and package dependencies point to the author's infrastructure (openlab-openos), trusted ecosystem organizations (Anza, Solana Foundation), or well-known development services. There are no signs of typosquatting or malicious obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:42 AM