bitflow-zest-sbtc-leverage-cycle
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill coordinates multiple DeFi operations by spawning the CLI tools of other skills (primitives). It uses the bun child_process.spawn method with argument arrays, preventing shell injection vulnerabilities. User inputs such as borrow amounts are strictly validated, and wallet addresses are sanitized before use in file paths.
- [SAFE]: The script implements robust safety mechanisms, including a mandatory confirmation token (--confirm=CYCLE) for all state-changing operations and a 'doctor' command to verify the presence and status of all dependencies.
- [SAFE]: Data persistence is handled locally in the user's home directory (~/.aibtc/state/) to track cycle progress and allow for resuming interrupted workflows. This state management does not involve the storage of credentials, private keys, or mnemonics.
Audit Metadata