index-bot
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-documented financial strategy layer that prioritizes safety and correct execution flows.- [CREDENTIALS_UNSAFE]: The instructions explicitly direct the agent to use environment variables for API keys and prohibit hardcoding of any secrets.- [INDIRECT_PROMPT_INJECTION]: Input validation is enforced for all user-provided values, including regex matching for token addresses and strict numeric checks for weights and amounts.- [COMMAND_EXECUTION]: Although Bash tools are available, a mandatory filter rejects all shell metacharacters in user inputs to prevent command injection.- [DATA_EXFILTRATION]: Network activity is restricted to fetching Uniswap quotes and interacting with the Trading API, with no signs of unauthorized data harvesting.
Audit Metadata