aave
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate Aave V3 protocol integration examples and documentation.
- [EXTERNAL_DOWNLOADS]: The skill correctly references official and well-known libraries such as @aave/aave-v3-core and viem for protocol interaction.
- [DATA_EXFILTRATION]: Code templates appropriately use environment variables for sensitive credentials like private keys, which is the standard safe practice for secret management in development.
- [PROMPT_INJECTION]: The skill defines ingestion points for external blockchain data, which represents a potential surface for indirect prompt injection, though the risk is negligible due to the use of structured data. 1. Ingestion points: Contract view functions in SKILL.md and templates/lending-client.ts. 2. Boundary markers: Data is parsed into specific numeric and address types via strict ABI definitions. 3. Capability inventory: Wallet operations (supply, borrow, repay, withdraw) for protocol interaction. 4. Sanitization: Fixed-schema parsing and type validation provided by the viem library.
Audit Metadata