dflow
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with official DFlow protocol APIs such as
quote-api.dflow.net,api.prod.dflow.net, andpond.dflow.netfor trading metadata and transaction generation. It also references well-known blockchain infrastructure including the Solana mainnet RPC and Jito Block Engine. - [CREDENTIALS_UNSAFE]: Security best practices are followed for secret management. All code examples and templates demonstrate the use of environment variables (e.g.,
process.env.DFLOW_API_KEY,process.env.SOLANA_PRIVATE_KEY) for handling sensitive API keys and private keys. No hardcoded credentials or secrets were identified in the files. - [COMMAND_EXECUTION]: The skill contains technical documentation and TypeScript/Node.js templates for executing trades. While these scripts perform network operations and sign transactions, they are consistent with the primary purpose of a trading SDK and operate within the expected scope of the DFlow protocol.
Audit Metadata