aeon-defi-monitor
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is installed from the author's public repository on GitHub (github.com/BankrBot/skills).
- [EXTERNAL_DOWNLOADS]: References official project source code and configuration hosted on GitHub (github.com/aaronjmars/aeon).
- [PROMPT_INJECTION]: The skill processes data from external DeFi APIs to generate action recommendations, creating a surface for indirect prompt injection.
- Ingestion points: Data is retrieved from DefiLlama APIs (api.llama.fi, yields.llama.fi) and blockchain RPC providers (Quicknode, Alchemy) as specified in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are defined in the skill to isolate external market data from agent instructions.
- Capability inventory: The skill is designed to output 'Submit' payloads that are intended for execution via the Bankr agent, providing a path from external data to transaction generation.
- Sanitization: No explicit validation or sanitization logic for data retrieved from external DeFi providers is described.
Audit Metadata