gas-war-sniper-teneo
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local binary located at
~/teneo-skill/teneoto execute various gas monitoring and blockchain queries. - Evidence: Multiple bash command examples such as
~/teneo-skill/teneo command "gas-sniper-agent" "gas" --room <roomId>in SKILL.md. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and source code repositories for the Teneo Protocol and its SDK.
- Evidence: Links to
github.com/TeneoProtocolAI/teneo-skillsandgithub.com/TeneoProtocolAI/teneo-agent-sdkfor resources and setup. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Teneo CLI tool and external APIs (like Etherscan), which represents a potential attack surface for indirect instructions.
- Ingestion points: The agent is instructed to extract and process the
humanizedfield from JSON responses returned by theteneoCLI tool. - Boundary markers: No explicit boundary markers or "ignore embedded instructions" warnings are present in the command processing logic.
- Capability inventory: The skill has the capability to execute shell commands via the bash tool specifically for the
teneoCLI. - Sanitization: No explicit sanitization or validation of the CLI output is described before the agent processes it for the user.
Audit Metadata