skills/ton-org/kit/ton-cli/Gen Agent Trust Hub

ton-cli

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the @ton/mcp package from the npm registry. This is the official package provided by the vendor (ton-org) for interacting with the TON blockchain.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run commands like npx @ton/mcp@alpha <tool_name>. It follows a secure workflow by separating transaction creation from broadcasting, allowing for user review and emulation before actual execution.- [INDIRECT_PROMPT_INJECTION]: The skill has an injection surface where user-provided data (e.g., transaction comments, addresses) is passed as arguments to CLI tools. Ingestion points: CLI arguments in SKILL.md (e.g., --comment). Boundary markers: Absent. Capability inventory: Blockchain transaction broadcasting via send_raw_transaction. Sanitization: Absent. This surface is inherent to the tool's function and is managed by recommended user-confirmation steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 09:50 AM
Security Audit — agent-trust-hub — ton-cli