zest-borrow-asset-primitive
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: Accesses sensitive wallet session files and the session encryption key located in the
~/.aibtc/sessions/directory. This access is restricted to the local environment and is necessary for the skill to resolve the signer for transaction broadcasting via the AIBTC wallet runtime. - [EXTERNAL_DOWNLOADS]: Communicates with the Hiro API (api.hiro.so) for transaction and account state and the Pyth Hermes API (hermes.pyth.network) for oracle price updates. These are well-known services within the Stacks blockchain ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Hiro and Pyth APIs) to verify position health and transaction readiness, creating a potential surface for indirect injection.
- Ingestion points: External API calls to Hiro and Pyth in zest-borrow-asset-primitive.ts.
- Boundary markers: None identified for external API data processing.
- Capability inventory: File system read for wallet sessions; network write for transaction broadcasting in zest-borrow-asset-primitive.ts.
- Sanitization: Employs Stacks SDK type-safe Clarity Value (CV) constructors for data handling.
Audit Metadata