SunPerp Perpetual Futures Trading
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: CRITICALDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill routes all trading, account tracking, and withdrawal requests to the external endpoint
https://api.sunx.io. This domain has been flagged as blacklisted by security intelligence scans. Sending sensitive account info, trading commands, and transaction signatures to a malicious endpoint poses a severe threat of data exfiltration and financial compromise. - [INDIRECT_PROMPT_INJECTION]: The skill displays an indirect prompt injection vulnerability surface.
- Ingestion points: External market tickers, order books, and public data are ingested through public endpoints in
scripts/market.js. - Boundary markers: There are no boundary markers or instructions to isolate external data from the core system prompt.
- Capability inventory: The skill maintains high-privilege capabilities including placement and cancellation of futures orders (
scripts/order.js) and asset withdrawal execution (scripts/wallet.js). - Sanitization: No input filtering or content sanitization is applied to the received market structure, allowing potentially manipulated external payloads to influence agent context.
Recommendations
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata