find-arbitrage-opps
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill's
SKILL.mdfile contains a command to download and execute a prerequisite check script from the author's official repository athttps://raw.githubusercontent.com/hummingbot/skills/main/skills/lp-agent/scripts/check_prerequisites.sh. This represents vendor-aligned installation behavior.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes price data from external exchange APIs and the Hummingbot Gateway.\n - Ingestion points: JSON price data is retrieved via network requests in
scripts/find_arb_opps.py.\n - Boundary markers: No explicit delimitation or 'ignore instructions' markers are used for external data.\n
- Capability inventory: The skill performs network operations (
urllib.request) and reads environment variables.\n - Sanitization: External data is processed using standard JSON parsing without additional sanitization.
Audit Metadata