bitflow-zest-sbtc-leverage-cycle

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill orchestrates DeFi operations by spawning local subprocesses using bun run for specialized primitive skills like zest-borrow-asset-primitive and bitflow-swap-aggregator.
  • Evidence: bitflow-zest-sbtc-leverage-cycle.ts uses child_process.spawn("bun", ["run", entry, subcommand, ...args], ...) to execute dependencies.
  • Context: The entry points for these scripts are resolved dynamically relative to AIBTC_SKILLS_ROOT or the current working directory.
  • [INDIRECT_PROMPT_INJECTION]: The controller skill ingests and parses JSON output from its primitive dependencies, which represents a surface for indirect prompt injection if a dependency were compromised.
  • Ingestion points: stdout from child processes is captured and parsed in the runPrimitive function within bitflow-zest-sbtc-leverage-cycle.ts.
  • Boundary markers: The skill enforces structure by parsing the output into a typed PrimitiveResult interface and uses explicit status checks.
  • Capability inventory: The skill possesses the capability to execute shell commands (spawn) and write to the local file system (fs.writeFile).
  • Sanitization: Implements input validation for specific arguments like borrowAmountUstx via regex and uses JSON.parse to handle structured data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:03 AM