@1247/orderly-data
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and code snippets revealed no malicious logic, persistence mechanisms, or obfuscated payloads.- [EXTERNAL_DOWNLOADS]: The skill interacts with external API endpoints hosted at
data-api.orderly.networkandapi.orderly.org. These connections are necessary to retrieve the DeFi metrics described in the skill and target established service domains.- [PROMPT_INJECTION]: The skill acts as a bridge for ingesting external data from API responses, which constitutes a surface for indirect prompt injection. 1. Ingestion points: Data retrieved from the Orderly Network API endpoints listed inSKILL.md. 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore commands within the ingested data. 3. Capability inventory: The provided implementation is limited to performing network GET requests via therequestslibrary; it does not include risky capabilities like shell command execution or local file system writes. 4. Sanitization: The provided code does not include explicit validation or sanitization of the API response content.
Audit Metadata