blockchain-data-collection-validation
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured workflow and script templates for validating blockchain data collection pipelines. The code uses standard libraries (web3.py, pandas) and follows best practices for data integrity in DuckDB.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests block data from external RPC providers in scripts like
poc_complete_pipeline.py. While this is an ingestion point for untrusted data, the skill is designed for schema validation and storage, and it does not process the data in a way that would trigger command execution or instructions within the agent's context.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates fetching data from well-known blockchain RPC providers (e.g., LlamaRPC, Alchemy). These are standard service dependencies for the intended functionality and do not involve the download of executable code from untrusted sources.\n- [DATA_EXPOSURE]: API endpoint templates use placeholders (e.g.,YOUR_API_KEY) for authentication, encouraging users to provide their own credentials securely rather than hardcoding secrets in the skill itself.
Audit Metadata