sbtc-auto-funnel
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external blockchain data from the Hiro API to calculate parameters for tool execution, creating a potential surface for indirect manipulation.
- Ingestion points:
sbtc-auto-funnel.tsfetches liquid balance and gas data fromapi.hiro.so. - Boundary markers: Absent; the skill relies on the agent's ability to interpret the structured JSON output contextually.
- Capability inventory: The skill generates
zest_supplyMCP tool commands which allow for DeFi write operations. - Sanitization: The logic includes hardcoded safety floors (
MIN_RESERVE_SATS = 50,000andMIN_GAS_USTX = 150,000) that prevent the agent from accidentally depleting its wallet even if the API data were manipulated.
Audit Metadata