portal-query-evm-traces
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from the blockchain (EVM traces) which may contain attacker-controlled content intended to influence agent behavior.\n
- Ingestion points: The agent ingests external JSON data from the Subsquid Portal API as described in
SKILL.md.\n - Boundary markers: The skill does not define specific boundary markers or instructions to ignore embedded commands in the processed trace data.\n
- Capability inventory: The skill utilizes the
Bash,WebFetch, andWebSearchtools to execute queries and retrieve data.\n - Sanitization: There is no evidence of sanitization or validation of the retrieved blockchain content before it is processed by the agent.
Audit Metadata