dflow-market-data
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing users to store sensitive credentials in environment variables (
DFLOW_API_KEY) and implement a backend relay to avoid exposing secrets in browser-side code. - [EXTERNAL_DOWNLOADS]: References established infrastructure owned by the vendor (DFlowProtocol), including WebSocket endpoints (
wss://quote-api.dflow.net,wss://dev-quote-api.dflow.net) and documentation sites (pond.dflow.net). - [COMMAND_EXECUTION]: The provided Node.js code snippet for a backend proxy uses the standard and well-known
wslibrary to facilitate WebSocket communication, with no evidence of dangerous shell command execution or remote script piping.
Audit Metadata