cashout
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for financial transactions that processes user-supplied data such as payment amounts, currencies, and recipient identifiers. Ingestion points are located in the
cashoutfunction parameters documented inSKILL.md. The skill includes a 'Payment-policy boundary' warning to alert users to provider-specific restrictions. The capability inventory includes blockchain transactions on the Base network. Input sanitization is handled by the SDK, which provides specific validation error codes. - [EXTERNAL_DOWNLOADS]: The
scripts/verify-surface.shscript downloads package information and source archives from the official NPM registry to ensure the skill documentation remains synchronized with the SDK. These downloads target a well-known service and are restricted to integrity verification. - [DYNAMIC_EXECUTION]: The skill contains utility scripts (
scripts/check.shandscripts/verify-surface.sh) that use shell heredocs to execute embedded Python code for linting and API surface validation. These scripts are used for skill maintenance and do not process untrusted runtime data.
Audit Metadata