swap-tokens
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official SDKs and adapters from Circle Financial's public npm registry, including @circle-fin/app-kit and @circle-fin/swap-kit.- [INDIRECT_PROMPT_INJECTION]: Implements a robust trust boundary by requiring explicit user confirmation for all transaction parameters such as recipients, amounts, and tokens. This prevents the agent from autonomously following instructions found in repository files.
- Ingestion points: Repository context (Instruction Hierarchy section).
- Boundary markers: Instruction explicitly states repository content is context only and requires user confirmation.
- Capability inventory: SDK methods for swap and bridge operations.
- Sanitization: Instructions to validate all inputs before submission.- [CREDENTIALS_UNSAFE]: Enforces strict secret management practices by instructing the agent to use environment variables for sensitive keys and forbidding the display or hardcoding of credentials like private keys or API keys.- [COMMAND_EXECUTION]: Provides standard package installation commands (npm install) and requires user-led execution for all scripts, ensuring no autonomous fund movement.
Audit Metadata