hodlmm-move-liquidity
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bun runto execute its internal script (hodlmm-move-liquidity.ts). This is the intended mechanism for the skill's operation and does not involve external or untrusted commands.\n- [SAFE]: The skill interacts with well-known services (Hiro API, Bitflow APIs) to fetch pool data and broadcast transactions. These interactions are documented and serve the skill's primary purpose without evidence of malicious exfiltration.\n- [SAFE]: Wallet management involves decrypting local keystore files using a user-provided password. This is a standard procedure for local signing and follows established patterns for AI-BTC tools. Private keys are never logged or sent to external servers.\n- [SAFE]: Theautocommand enables autonomous execution of transactions. The risk is mitigated by requiring an explicit operator opt-in (starting the command with the password), contract-level slippage protection, and a mandatory 4-hour cooldown period between moves.
Audit Metadata