blofin-asset-manager
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses (BloFin exchange) which could theoretically contain adversarial content intended to influence the agent's behavior. While this is an inherent risk of tool-use skills, the lack of explicit boundary markers in the instructions increases this surface.
- Ingestion points: Data enters the agent's context through responses from tools such as
get_asset_balances,get_fund_transfer_history,get_deposit_history, andget_withdrawal_history(referenced in SKILL.md). - Boundary markers: The skill does not define specific delimiters or "ignore embedded instructions" warnings for processing external API data.
- Capability inventory: The skill possesses the capability to move funds between account types using the
fund_transfertool. - Sanitization: There are no explicit instructions for sanitizing or validating the strings returned by the API before they are processed by the agent.
Audit Metadata