hermetica-yield-rotator

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external market data from Bitflow and Hiro APIs to recommend yield-optimizing actions.\n
  • Ingestion points: Market data and contract states are fetched via fetchJson and fetchPostJson from bff.bitflowapis.finance and api.mainnet.hiro.so in hermetica-yield-rotator.ts.\n
  • Boundary markers: The skill communicates with the agent using structured JSON output to define recommended actions.\n
  • Capability inventory: The skill generates MCP commands for contract calls (staking/unstaking) and Bitflow HODLMM liquidity management across its execution logic.\n
  • Sanitization: Implements sanitiseApr to prevent manipulation by capping input APR values at 500%, validates wallet addresses via regex, and ensures transaction amounts are within a hardcoded 500 USDh autonomous safety limit.\n- [COMMAND_EXECUTION]: The skill produces MCP tool commands for performing DeFi operations on the Stacks blockchain.\n
  • Evidence: hermetica-yield-rotator.ts generates structured command objects for tools like call_contract, bitflow_swap, and bitflow_hodlmm_add_liquidity.\n
  • Note: All write operations require a manual --confirm flag from the user, providing a critical check against accidental or unauthorized transactions.\n- [EXTERNAL_DOWNLOADS]: Fetches live blockchain and protocol data from external service providers.\n
  • Evidence: Accesses https://api.mainnet.hiro.so and https://bff.bitflowapis.finance in hermetica-yield-rotator.ts for real-time exchange rates and pool APRs.\n
  • Note: These are established service providers within the Stacks ecosystem; Hiro is a primary infrastructure provider, and Bitflow is the official provider for the HODLMM protocol.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:03 AM