hive-defi-research
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No evidence of malicious prompt injection, obfuscation, or persistence mechanisms was found in the skill instructions or associated files.
- [DATA_EXFILTRATION]: The skill requires network access to function, which is used for retrieving public DeFi metrics. No unauthorized data transmission or access to sensitive local files was detected.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its data ingestion patterns.
- Ingestion points: External DeFi protocol data and API responses are processed and summarized within the agent context via the
invoke_api_endpointtool as described inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the fetched data are present.
- Capability inventory: The skill possesses network communication capabilities (
invoke_api_endpoint). - Sanitization: There are no instructions for sanitizing or validating the content of API responses before they are presented to the agent.
Audit Metadata