defi
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data fetched from decentralized protocols (ALEX DEX and Zest Protocol), which could potentially contain adversarial content designed to influence the agent's behavior.
- Ingestion points: Data is ingested through subcommands such as
alex-list-pools,zest-list-assets, andalex-get-swap-quoteindefi/defi.ts. - Boundary markers: The skill does not implement explicit boundary markers or delimiters when interpolating external protocol data into the agent's context.
- Capability inventory: The skill possesses significant capabilities, including executing token swaps (
alex-swap), supplying assets to lending pools (zest-supply), and borrowing assets (zest-borrow) as defined indefi/defi.ts. - Sanitization: Input arguments are handled by the
commanderlibrary, and token amounts are validated viaBigIntconversion, providing basic protection against malformed numeric input. - [COMMAND_EXECUTION]: The skill facilitates the execution of blockchain transactions via subcommands in
defi/defi.ts. While these are the primary purpose of the skill, they represent powerful actions that the agent can take on behalf of the user, requiring an unlocked wallet state.
Audit Metadata