xl1-testing
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not contain hardcoded credentials or expose sensitive data. It provides clear guidance for secure secret management, recommending the use of .env files and OS keychains for automation. It also explicitly warns against logging or committing sensitive information like seed phrases.- [INDIRECT_PROMPT_INJECTION]: The skill describes how to build and test applications that ingest data from external blockchain sources and data lakes, which constitutes a potential indirect prompt injection surface. However, the documentation includes instructions for schema validation to mitigate these risks.
- Ingestion points: Chain data from gateways and object bodies from Aries datalakes.
- Boundary markers: Usage of schema validation (asSchema) is encouraged in the documentation.
- Capability inventory: The testing scripts include capabilities for network communication (RPC, S3 APIs) and execution of the xl1 CLI binary.
- Sanitization: The documentation recommends importing existing domain functions and using validated schemas for payload construction.
Audit Metadata