yield-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/yield_comparison.py fetches market data from the DeFiLlama public API (yields.llama.fi). This is a well-known industry service for DeFi metrics.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from an external source, which represents a potential surface for indirect prompt injection.
  • Ingestion points: Data is retrieved from https://yields.llama.fi/pools in scripts/yield_comparison.py.
  • Boundary markers: Absent. The skill does not implement delimiters or instructions to ignore potential commands within the processed data.
  • Capability inventory: The skill utilizes the httpx library for network data retrieval but lacks dangerous capabilities like shell execution or local file modification.
  • Sanitization: The script parses JSON fields such as project and symbol and displays them without explicit sanitization or strict schema validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:54 PM