routing-dex-trades
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches market data and trade quotes from well-known DeFi aggregator APIs, including 1inch, Paraswap, and 0x. It also references blockchain RPC endpoints via Alchemy and gas data via Etherscan.
- [COMMAND_EXECUTION]: Utilizes Bash to execute local Python scripts (
scripts/dex_router.py) for trade analysis, price impact calculations, and MEV risk assessment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes strings from external API responses (such as protocol names and token metadata), which could theoretically be manipulated to include malicious instructions for the agent.
Audit Metadata