evm-token-decimals
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides code snippets for querying and normalizing ERC-20 token decimals across multiple programming languages (Python, TypeScript, Solidity). The logic follows security best practices by querying metadata at runtime rather than relying on hardcoded values, which mitigates errors when handling bridged or non-standard assets.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external blockchain contracts, which represents a standard data ingestion surface for DeFi tools.
- Ingestion points: Smart contract calls
decimals()andbalanceOf()in SKILL.md. - Boundary markers: The skill instructions emphasize defensive handling and caching by unique identifiers (chain ID and address).
- Capability inventory: The skill utilizes network-read capabilities via blockchain RPC providers to fetch token metadata.
- Sanitization: The provided examples include try-catch blocks to handle reverting contract calls and use high-precision math libraries (Decimal, BigInt) to prevent floating-point errors.
Audit Metadata