skill-04-nft-management
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data which presents a surface for indirect prompt injection.
- Ingestion points: External data enters the context when resolving NFT metadata URIs (IPFS CIDs or Arweave txids) and when fetching aggregated listings via the Reservoir API.
- Boundary markers: The skill lacks explicit boundary markers or delimiters to separate untrusted external metadata from internal instructions, which could allow malicious content in metadata to influence agent behavior.
- Capability inventory: The agent has the capability to perform sensitive blockchain operations, including minting tokens, setting contract approvals, and deploying registries for token-bound accounts.
- Sanitization: There are no instructions for sanitizing, filtering, or validating the content of the external metadata before processing.
- [NO_CODE]: This skill consists entirely of instructional markdown and configuration metadata. It does not include any scripts, binaries, or executable code blocks.
Audit Metadata