dflow

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill interacts with official DFlow protocol APIs such as quote-api.dflow.net, api.prod.dflow.net, and pond.dflow.net for trading metadata and transaction generation. It also references well-known blockchain infrastructure including the Solana mainnet RPC and Jito Block Engine.
  • [CREDENTIALS_UNSAFE]: Security best practices are followed for secret management. All code examples and templates demonstrate the use of environment variables (e.g., process.env.DFLOW_API_KEY, process.env.SOLANA_PRIVATE_KEY) for handling sensitive API keys and private keys. No hardcoded credentials or secrets were identified in the files.
  • [COMMAND_EXECUTION]: The skill contains technical documentation and TypeScript/Node.js templates for executing trades. While these scripts perform network operations and sign transactions, they are consistent with the primary purpose of a trading SDK and operate within the expected scope of the DFlow protocol.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:30 AM
Security Audit — agent-trust-hub — dflow