sodax-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill contains technical documentation, engineering guidelines, and code examples for interacting with the SODAX SDK. The instructions are focused on legitimate developer tasks like refactoring v1 code to v2 and implementing DeFi features.
- [EXTERNAL_DOWNLOADS]: The documentation references fetching chain logo assets from GitHub's raw content service (
raw.githubusercontent.com). This is used for UI representation and involves a well-known, trusted service provider. Additionally, it mentions connecting to the SODAX and Bound Exchange API endpoints (api.sodax.com,api.radfi.co,svc.bound.exchange) which are vendor-owned resources. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. Documentation correctly advises users to store sensitive keys in environment variables and provides security warnings against exposing them in client-side bundles.
Audit Metadata