quote
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx fibx@latestto download and execute the latest version of thefibxpackage from the NPM registry. This package provides the core functionality for price quoting and is maintained by the skill author. - [COMMAND_EXECUTION]: Shell commands are executed via the
Bashtool to interact with thefibxCLI utility. This is used to pass parameters such as token names, amounts, and chain selections. - [DATA_EXFILTRATION]: The CLI tool performs network operations to retrieve real-time pricing and routing data from blockchain networks. These operations are limited to public price data and do not involve sensitive user information or local files.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing data from external sources.
- Ingestion points: The output of the
npx fibx@latest quotecommand is incorporated into the agent's context. - Boundary markers: No specific delimiters or instructions are used to separate tool output from other instructions.
- Capability inventory: The agent has access to the
Bashtool, which could be targeted by malicious data in the tool output. - Sanitization: There is no evidence of sanitization or validation performed on the external data before it is presented to the agent.
Audit Metadata