tres-data-collection-commit
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Interaction with External MCP Tools: The skill leverages the Tres Finance MCP to perform authenticated queries and mutations. It uses tools like
get_viewerandexecuteto interact with the Tres API, which is the standard method for such integrations. - Human-in-the-Loop Confirmation: A notable security feature is the mandatory confirmation step (Step 4) before firing the
triggerCommitmutation. The skill explicitly requires an affirmative user response before executing the final action, preventing accidental or unauthorized data refreshes. - Safe Data Handling: The skill does not process or exfiltrate sensitive credentials like private keys or mnemonic phrases; it operates on wallet identifiers and public addresses already onboarded to the Tres platform.
- Input Validation and Resolution: The instructions emphasize resolving user-friendly wallet names to verified internal IDs before calling the API, which mitigates risk associated with ambiguous or malformed user input.
Audit Metadata