bitflow-zest-sbtc-leverage-cycle
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates DeFi operations by spawning local subprocesses using
bun runfor specialized primitive skills likezest-borrow-asset-primitiveandbitflow-swap-aggregator. - Evidence:
bitflow-zest-sbtc-leverage-cycle.tsuseschild_process.spawn("bun", ["run", entry, subcommand, ...args], ...)to execute dependencies. - Context: The entry points for these scripts are resolved dynamically relative to
AIBTC_SKILLS_ROOTor the current working directory. - [INDIRECT_PROMPT_INJECTION]: The controller skill ingests and parses JSON output from its primitive dependencies, which represents a surface for indirect prompt injection if a dependency were compromised.
- Ingestion points:
stdoutfrom child processes is captured and parsed in therunPrimitivefunction withinbitflow-zest-sbtc-leverage-cycle.ts. - Boundary markers: The skill enforces structure by parsing the output into a typed
PrimitiveResultinterface and uses explicit status checks. - Capability inventory: The skill possesses the capability to execute shell commands (
spawn) and write to the local file system (fs.writeFile). - Sanitization: Implements input validation for specific arguments like
borrowAmountUstxvia regex and usesJSON.parseto handle structured data.
Audit Metadata