zest-auto-repay
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official Hiro API (api.hiro.so) to monitor Zest Protocol v2 positions on the Stacks mainnet, which is a well-known and trusted service within the ecosystem.
- [SAFE]: Multiple layers of safety guardrails are hard-coded into the logic, including per-operation spend caps (500k sats), daily spend caps (1M sats), minimum wallet reserve requirements (5k sats), and a 10-minute cooldown period between repayments.
- [SAFE]: The implementation follows a non-custodial pattern where it calculates repayment parameters and emits them as tool requests for the agent framework to handle, ensuring the script itself never handles private keys or signs transactions directly.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or dynamic code execution was found. The code is transparent and utilizes standard libraries such as @stacks/transactions and commander.
Audit Metadata