etherscan-api

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches live blockchain data and technical documentation from Etherscan's official API (api.etherscan.io) and documentation (docs.etherscan.io) domains. These are well-known and established services for blockchain infrastructure.- [COMMAND_EXECUTION]: Utilizes a local shell script, scripts/detect-plan.sh, to determine the capabilities and rate limits of the provided API key. The script performs a standard balance probe on the Base chain and uses common utilities like curl, grep, and sed to parse responses.- [DATA_EXFILTRATION]: Transmits the user-provided ETHERSCAN_API_KEY to Etherscan's official servers to authorize data requests. This is a standard and secure practice for API-based integrations.- [PROMPT_INJECTION]: The skill ingests untrusted data from the blockchain (e.g., token metadata, transaction indices). While this represents a surface for indirect prompt injection, the skill does not use this data in high-privilege operations such as arbitrary code execution or file system writes, effectively mitigating the risk.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 11:58 AM