zest-auto-repay
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bunruntime to execute its core TypeScript logic for monitoring DeFi positions and computing repayment plans. - [EXTERNAL_DOWNLOADS]: The script fetches on-chain data, position information, and contract states from the well-known Hiro API (
api.hiro.so). - [DATA_EXPOSURE]: The skill reads the
STACKS_ADDRESSenvironment variable to determine which wallet position to monitor for the Zest Protocol. - [SAFE]: The skill implements extensive hard-coded safety limits in
zest-auto-repay.tsthat cannot be overridden by user flags, including aHARD_CAP_PER_DAY(0.01 BTC) andMIN_WALLET_RESERVE. It also uses a persistent local file (~/.zest-auto-repay-spend.json) to safely track daily spending across sessions.
Audit Metadata