hermetica-yield-rotator
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external market data from Bitflow and Hiro APIs to recommend yield-optimizing actions.\n
- Ingestion points: Market data and contract states are fetched via
fetchJsonandfetchPostJsonfrombff.bitflowapis.financeandapi.mainnet.hiro.soinhermetica-yield-rotator.ts.\n - Boundary markers: The skill communicates with the agent using structured JSON output to define recommended actions.\n
- Capability inventory: The skill generates MCP commands for contract calls (staking/unstaking) and Bitflow HODLMM liquidity management across its execution logic.\n
- Sanitization: Implements
sanitiseAprto prevent manipulation by capping input APR values at 500%, validates wallet addresses via regex, and ensures transaction amounts are within a hardcoded 500 USDh autonomous safety limit.\n- [COMMAND_EXECUTION]: The skill produces MCP tool commands for performing DeFi operations on the Stacks blockchain.\n - Evidence:
hermetica-yield-rotator.tsgenerates structured command objects for tools likecall_contract,bitflow_swap, andbitflow_hodlmm_add_liquidity.\n - Note: All write operations require a manual
--confirmflag from the user, providing a critical check against accidental or unauthorized transactions.\n- [EXTERNAL_DOWNLOADS]: Fetches live blockchain and protocol data from external service providers.\n - Evidence: Accesses
https://api.mainnet.hiro.soandhttps://bff.bitflowapis.financeinhermetica-yield-rotator.tsfor real-time exchange rates and pool APRs.\n - Note: These are established service providers within the Stacks ecosystem; Hiro is a primary infrastructure provider, and Bitflow is the official provider for the HODLMM protocol.
Audit Metadata