quote

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx fibx@latest to download and execute the latest version of the fibx package from the NPM registry. This package provides the core functionality for price quoting and is maintained by the skill author.
  • [COMMAND_EXECUTION]: Shell commands are executed via the Bash tool to interact with the fibx CLI utility. This is used to pass parameters such as token names, amounts, and chain selections.
  • [DATA_EXFILTRATION]: The CLI tool performs network operations to retrieve real-time pricing and routing data from blockchain networks. These operations are limited to public price data and do not involve sensitive user information or local files.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing data from external sources.
  • Ingestion points: The output of the npx fibx@latest quote command is incorporated into the agent's context.
  • Boundary markers: No specific delimiters or instructions are used to separate tool output from other instructions.
  • Capability inventory: The agent has access to the Bash tool, which could be targeted by malicious data in the tool output.
  • Sanitization: There is no evidence of sanitization or validation performed on the external data before it is presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 06:37 AM
Security Audit — agent-trust-hub — quote