wallet-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes official API endpoints (
api.zerion.io) and references developer documentation from Zerion (developers.zerion.io). These represent well-known services and safe external references. - [CREDENTIALS_UNSAFE]: Authentication examples use safe placeholders for sensitive values, such as
zk_dev_...for Zerion API keys and5C1y...for Solana private keys. The skill correctly instructs users to manage these via environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill processes Solana wallet data retrieved from the Zerion API. While this constitutes an ingestion point for external data, the risk is negligible due to the lack of exploitable high-privilege capabilities.
- Ingestion points: Transaction and position data retrieved from
api.zerion.io. - Boundary markers: None identified.
- Capability inventory: Network access (
curl) for data retrieval. - Sanitization: Not identified for JSON responses.
Audit Metadata