indigo-stability
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
nodeto execute local scripts for protocol interaction, including viewing accounts and managing stability pool positions. - [PROMPT_INJECTION]: The skill processes external blockchain data, creating an indirect prompt injection surface.
- Ingestion points: Data fetched via
getStabilityAccountsandgetStabilityPoolsinscripts/my-accounts.jsandscripts/pools.jsrespectively. - Boundary markers: None identified; external data is printed directly to the console.
- Capability inventory: Execution of transaction management scripts as documented in
SKILL.md. - Sanitization: Data is logged to the console without explicit filtering or escaping.
Audit Metadata