skills/bankrbot/skills/quotient-api/Gen Agent Trust Hub

quotient-api

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several external resources, including the Quotient API gateway (q-api.quotient.social), the developer portal (dev.quotient.social), and the Bankr Agent API (api.bankr.bot). These are all documented as the primary infrastructure for the service and the skill's author ('BankrBot'), representing standard operational dependencies.
  • [COMMAND_EXECUTION]: The skill provides installation instructions pointing to the author's GitHub repository (github.com/BankrBot/skills). This is standard procedure for skill distribution and does not involve immediate or hidden command execution.
  • [CREDENTIALS_UNSAFE]: The documentation and code examples reference sensitive environment variables such as QUOTIENT_API_KEY, EVM_PRIVATE_KEY, and BANKR_API_KEY. These are handled using best practices (placeholders like process.env.* and instructions for users to set them in their own environment) rather than being hardcoded.
  • [DATA_EXFILTRATION]: Network operations are restricted to the primary API domains defined in the skill for the purpose of fetching market data and processing authorized payments. There is no evidence of unauthorized data collection or transmission to third-party servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 05:49 PM
Security Audit — agent-trust-hub — quotient-api