sodax-sdk

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of documentation (Markdown) and TypeScript code examples for the @sodax/sdk library. All content is technical and oriented toward assisting developers with integration and migration tasks.
  • [SAFE]: No hardcoded credentials, private keys, or secrets are present. The documentation explicitly instructs users to manage API keys using environment variables rather than inlining them in code.
  • [EXTERNAL_DOWNLOADS]: The documentation references official project resources, including blockchain RPC nodes and backend APIs (api.sodax.com, bound.exchange). It also notes that token logos are retrieved from a verified project repository on GitHub. All external references are appropriate for the skill's functional scope.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an interface for processing external blockchain data and user inputs. The documentation indicates that the SDK utilizes schema validation (via Valibot) for backend responses, providing a layer of protection against unexpected or malformed data injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:28 PM
Security Audit — agent-trust-hub — sodax-sdk