sol-incinerator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill's functionality is consistent with its stated purpose of providing an SDK for the Sol-Incinerator platform.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with
v2.api.sol-incinerator.com. This is the primary functional endpoint for the Sol-Incinerator service and is required for the skill to perform its intended blockchain operations.\n- [DATA_EXPOSURE]: The skill demonstrates best practices by using environment variables (e.g.,USER_PUBLIC_KEY) for account identifiers and ensuring that private keys remain local for transaction signing.\n- [INDIRECT_PROMPT_INJECTION]: The skill interacts with an external API, creating a standard data ingestion surface. However, the data processed (serialized transaction bytes and status metadata) is structured and does not influence agent instructions.\n - Ingestion points: API response handling in
examples/basic/http-flow.tsandtemplates/sol-incinerator-client.ts.\n - Boundary markers: Not applicable for this data type (transaction payloads).\n
- Capability inventory: Network requests via
fetch.\n - Sanitization: Standard JSON parsing and HTTP status code validation.
Audit Metadata