bitflow-hodlmm-deposit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill accesses sensitive local file paths within the
~/.aibtc/directory, includingwallets.json,config.json, and encryptedkeystore.jsonfiles. These files are used to retrieve and decrypt keys for signing transactions locally. This is a standard integration pattern for the AIBTC development ecosystem and does not involve network exfiltration of secrets. - [COMMAND_EXECUTION]: The script executes transaction logic via
bun run, generating and broadcasting signed contract calls to the Stacks mainnet. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs to dynamically calculate transaction parameters, creating a surface for indirect influence from external data sources.
- Ingestion points: Fetches pool metadata, active bin IDs, and user LP positions from
bff.bitflowapis.financeandapi.hiro.so(bitflow-hodlmm-deposit.ts). - Boundary markers: Implements a structured command interface (
doctor,status,run) and requires an explicit--confirm=DEPOSITflag before executing any write operations. - Capability inventory: Performs transaction signing and broadcasting; reads and writes to local vendor-specific configuration and session files in
~/.aibtc. - Sanitization: Employs strict BigInt arithmetic for financial values, validates the canonical status of smart contracts, enforces slippage basis-point tolerances, and utilizes Stacks 'Deny' mode post-conditions to ensure that no more than the intended assets can leave the wallet.
Audit Metadata