hodlmm-bin-guardian
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a command-line interface using the
commanderlibrary, executed via the Bun runtime. It provides specific subcommands for diagnostics and monitoring functionality. - [EXTERNAL_DOWNLOADS]: The skill fetches live market and pool data from Bitflow's official API (
bff.bitflowapis.finance) and fee estimates from the Hiro Stacks API (api.mainnet.hiro.so). These resources are well-known services within the Stacks blockchain ecosystem. - [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill accesses a local state file (
~/.hodlmm-guardian-state.json) strictly for tracking rebalance cooldowns and does not interact with sensitive directories or credentials. - [SAFE]: The implementation includes robust input validation for wallet addresses and pool identifiers using regular expressions. The instructions explicitly state that all state-changing transactions require manual human approval, maintaining a safe operational boundary.
Audit Metadata