styx
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a command-line interface for managing Styx protocol operations, including liquidity monitoring and transaction broadcasting. These commands are purpose-built for DeFi interactions.
- [CREDENTIALS_UNSAFE]: Private keys are accessed locally from a wallet manager for the purpose of signing Bitcoin transactions. The signing process occurs locally via the @scure/btc-signer library, and keys are never transmitted to external services or written to logs.
- [DATA_EXFILTRATION]: Outbound network requests are limited to official protocol endpoints for Styx and well-known Bitcoin network services (Mempool.space, Unisat). Data transmitted consists of standard transaction parameters and status updates required for the swap process.
- [INDIRECT_PROMPT_INJECTION]: The skill consumes data from external APIs regarding pool availability and network fees. It mitigates potential risks by validating inputs, enforcing minimum deposit amounts, and performing safety checks (via Unisat indexer) to prevent the accidental spending of ordinal inscriptions.
Audit Metadata