tres-asc845-swap-reprice-skill
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- Standard Tool Usage: The skill interacts with the
user-tres-financeMCP server to perform legitimate financial operations. It uses theexecutetool for both data retrieval (subtransactions) and updates (mutations). - Local Data Processing: Calculations are performed by two included Python scripts (
orchestrate_reprice.pyandreprice_swaps.py). These scripts use standard Python library modules (likedecimalfor financial precision) and do not initiate external network connections or execute arbitrary commands. - User Verification Control: The instructions explicitly state that the agent must never run mutations without explicit user confirmation, which is a significant safety control for financial operations.
- Indirect Injection Surface: The skill processes external transaction data. While this represents a potential surface for indirect prompt injection, the risk is minimized because the data is processed by strictly typed Python logic before being presented to the model or used in mutations.
- Privilege Management: The skill operates within the scope of the provided MCP server permissions and does not attempt to escalate privileges or access sensitive local files like SSH keys or environment variables.
Audit Metadata