whale-wallet-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not contain any executable scripts, remote downloads, or hidden obfuscation. It functions primarily as a role-framing and workflow guide for an AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that ingests untrusted external data from the Solana blockchain, which represents a potential attack surface.
- Ingestion points: Blockchain data sources such as Helius and Birdeye APIs as described in the Workflow sections of SKILL.md.
- Boundary markers: The templates provided (Whale Profile, Alert Template) do not explicitly define delimiters to separate external data from agent instructions.
- Capability inventory: No automated tools or executable scripts (exec, eval, subprocess) are included in this skill, mitigating the risk of exploitation through injected data.
- Sanitization: The skill does not define specific sanitization or validation logic for the external blockchain metadata it processes.
Audit Metadata