hive-dex-pool-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses specific toolsets like
onchain_dex_pool_analysisto interact with blockchain data. These operations are scoped to public financial data (liquidity, trades, candles) and do not involve arbitrary shell command execution. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch real-time DEX data via defined API endpoints. These requests are limited to the intended purpose of the skill and utilize standard routing through the agent's provided tools.
- [PROMPT_INJECTION]: No patterns of prompt injection, instruction overrides, or safety filter bypasses were detected. The instructions are focused on data retrieval and reporting formatting.
- [DATA_EXFILTRATION]: There is no evidence of the skill accessing sensitive local files (like SSH keys or credentials) or sending user-provided secrets to external servers. The data flow is strictly from public blockchain APIs to the user's report.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or private keys were found. The skill relies on platform-managed toolsets for authentication with its data providers.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (DEX trades and pool metadata). While this is an ingestion surface, the skill implements 'Bounded calls' (limiting trade and candle counts) and follows a strict reporting template, which mitigates the risk of the agent obeying instructions hidden in on-chain metadata.
Audit Metadata