hodlmm-arb-executor
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs (Pyth, Hiro, and Bitflow) to calculate arbitrage opportunities and generate transaction commands. Ingestion points:
fetchOraclePrices,fetchXykReserves, andfetchDlmmBinsinhodlmm-arb-executor.ts. Boundary markers: The skill returns structured JSON output, providing clear delimitation for the agent context. Capability inventory: Generates MCP commands forbitflow_swap,bitflow_hodlmm_add_liquidity, andbitflow_hodlmm_withdraw_liquidity. Sanitization: The script explicitly parses API responses into numeric values and specific command arguments, ensuring external data is not treated as instructions. - [COMMAND_EXECUTION]: The skill utilizes a CLI interface (via the
commanderpackage) to handle pre-defined operational tasks. Execution is restricted to local logic with validation of input arguments. - [EXTERNAL_DOWNLOADS]: Fetches market data from well-known and established services including Pyth Network, Hiro Systems, and Bitflow Finance. These network operations are strictly for legitimate price discovery and do not involve sensitive data exposure.
Audit Metadata