simulating-flash-loans
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were detected. The skill's stated purpose aligns with its implementation.
- [COMMAND_EXECUTION]: The skill uses a scoped Bash tool to run its internal Python scripts (e.g., flash_simulator.py). This is an expected and safe use of the tool for CLI-based utility skills.
- [EXTERNAL_DOWNLOADS]: The skill is configured to connect to well-known public blockchain RPC providers (such as Ankr and LlamaRPC) to fetch real-time market data. These references are documented neutrally and are standard for cryptocurrency tools.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external blockchain protocols. However, this data is processed numerically for profit calculations and formatted into structured output, posing a minimal risk of influencing agent behavior through malicious data injection.
Audit Metadata