quotient-api
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external resources, including the Quotient API gateway (
q-api.quotient.social), the developer portal (dev.quotient.social), and the Bankr Agent API (api.bankr.bot). These are all documented as the primary infrastructure for the service and the skill's author ('BankrBot'), representing standard operational dependencies. - [COMMAND_EXECUTION]: The skill provides installation instructions pointing to the author's GitHub repository (
github.com/BankrBot/skills). This is standard procedure for skill distribution and does not involve immediate or hidden command execution. - [CREDENTIALS_UNSAFE]: The documentation and code examples reference sensitive environment variables such as
QUOTIENT_API_KEY,EVM_PRIVATE_KEY, andBANKR_API_KEY. These are handled using best practices (placeholders likeprocess.env.*and instructions for users to set them in their own environment) rather than being hardcoded. - [DATA_EXFILTRATION]: Network operations are restricted to the primary API domains defined in the skill for the purpose of fetching market data and processing authorized payments. There is no evidence of unauthorized data collection or transmission to third-party servers.
Audit Metadata