yield-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/yield_comparison.pyfetches market data from the DeFiLlama public API (yields.llama.fi). This is a well-known industry service for DeFi metrics. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from an external source, which represents a potential surface for indirect prompt injection.
- Ingestion points: Data is retrieved from
https://yields.llama.fi/poolsinscripts/yield_comparison.py. - Boundary markers: Absent. The skill does not implement delimiters or instructions to ignore potential commands within the processed data.
- Capability inventory: The skill utilizes the
httpxlibrary for network data retrieval but lacks dangerous capabilities like shell execution or local file modification. - Sanitization: The script parses JSON fields such as
projectandsymboland displays them without explicit sanitization or strict schema validation.
Audit Metadata