defi-portfolio-scanner
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches DeFi position data and token balances from official protocol APIs (Bitflow, ALEX, Styx) and the Hiro Stacks API. These network operations are strictly read-only and targeted at legitimate service endpoints required for the skill's primary functionality.
- [COMMAND_EXECUTION]: CLI commands are implemented using the standard 'commander' library to handle user arguments. The skill does not execute arbitrary shell commands or spawn untrusted external processes.
- [DATA_EXPOSURE]: The skill operates on public Stacks addresses provided by the user. It does not access sensitive local files (such as .env or .ssh), environment variables, or private keys, adhering to the documented read-only safety notes.
Audit Metadata