chainlink-nop-skill
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute a bundled Python diagnostic script (scripts/node_api.py). This client is the primary mechanism for retrieving diagnostic data from a Chainlink Node API. - [EXTERNAL_DOWNLOADS]: The Python client performs authenticated HTTP GET requests to a user-specified Chainlink Node API. Security is enhanced by a custom
SameOriginRedirectHandler, which prevents credentials from being forwarded to different origins during HTTP redirects. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses, which constitutes an untrusted input surface. This risk is mitigated by explicit instructions in
SKILL.mdto treat responses as data rather than instructions, and by extensive recursive sanitization logic in the Python client that redacts keys related to passwords, secrets, and keys before the data enters the agent's context.
Audit Metadata