ton-cli
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@ton/mcppackage from the npm registry. This is the official package provided by the vendor (ton-org) for interacting with the TON blockchain.- [COMMAND_EXECUTION]: The skill utilizes theBashtool to run commands likenpx @ton/mcp@alpha <tool_name>. It follows a secure workflow by separating transaction creation from broadcasting, allowing for user review and emulation before actual execution.- [INDIRECT_PROMPT_INJECTION]: The skill has an injection surface where user-provided data (e.g., transaction comments, addresses) is passed as arguments to CLI tools. Ingestion points: CLI arguments inSKILL.md(e.g.,--comment). Boundary markers: Absent. Capability inventory: Blockchain transaction broadcasting viasend_raw_transaction. Sanitization: Absent. This surface is inherent to the tool's function and is managed by recommended user-confirmation steps.
Audit Metadata