hodlmm-inventory-balancer

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses sub-process execution to manage its environment and coordinate tasks.
  • Uses spawnSync to install official Stacks SDK dependencies via the bun add package manager.
  • Invokes the companion hodlmm-move-liquidity script locally to perform liquidity redeployments.
  • [EXTERNAL_DOWNLOADS]: The script retrieves necessary market and blockchain data from external sources.
  • Fetches liquidity pool metadata and price quotes from official Bitflow API endpoints (bitflowapis.finance).
  • Queries the Hiro API (api.mainnet.hiro.so) for wallet balances, nonces, and transaction status checks.
  • [SAFE]: The skill adheres to security best practices for AI agent extensions.
  • Secrets are managed via environment variables and local encrypted files rather than command-line arguments.
  • Implements on-chain safety via Stacks transaction post-conditions to ensure funds are not transferred without meeting specific price and amount constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 07:01 PM
Security Audit — agent-trust-hub — hodlmm-inventory-balancer