bitflow-swap-aggregator
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a mandatory confirmation mechanism using the
--confirm=SWAPflag to ensure users explicitly approve financial transactions before they are broadcast. - [SAFE]: Security guardrails are in place to verify wallet balances, STX gas reserves, and current mempool depth, preventing failed transactions or loss of funds due to insufficient resources.
- [SAFE]: Private key management is handled securely by accessing local encrypted storage within the
~/.aibtcdirectory. Signing is performed locally, and sensitive credentials are never transmitted over the network. - [SAFE]: Network activity is limited to established blockchain infrastructure providers, specifically the Hiro API and Bitflow API, which are required for quoting prices and broadcasting transactions.
- [SAFE]: The skill uses Stacks post-conditions in 'Deny' mode, providing a cryptographic guarantee that only the intended amount of tokens can leave the wallet during a swap.
Audit Metadata