mev-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches market data, including token liquidity and volume, from DexScreener and CoinGecko public APIs.
- [EXTERNAL_DOWNLOADS]: Communicates with Solana mainnet RPC nodes and Helius infrastructure for transaction parsing and analysis.
- [EXTERNAL_DOWNLOADS]: Interacts with the Jito Block Engine for transaction bundle submission and status tracking.
- [COMMAND_EXECUTION]: Provides instructions for installing the standard
httpxPython library via theuvpackage manager. - [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through the ingestion of untrusted data from blockchain RPCs and market data providers.
- [PROMPT_INJECTION]: Ingestion points:
fetch_token_pool_datainscripts/mev_risk_estimator.pyandfetch_transactioninscripts/sandwich_detector.py. - [PROMPT_INJECTION]: Boundary markers: Absent.
- [PROMPT_INJECTION]: Capability inventory: External network communication via the
httpxlibrary. - [PROMPT_INJECTION]: Sanitization: Standard JSON parsing is used without additional validation of content fields before processing or display.
Audit Metadata