gmx
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected.
- [DATA_EXPOSURE]: The skill correctly instructs users to use environment variables (process.env.PRIVATE_KEY) for sensitive credentials instead of hardcoding them, aligning with best practices for secret management.
- [EXTERNAL_DOWNLOADS]: Dependencies such as 'viem' and '@gmx-io/sdk' are standard, well-known packages used for blockchain interactions and GMX protocol integration.
- [PROMPT_INJECTION]: No evidence of prompt injection or behavior override attempts was found in the instructions, code comments, or metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured blockchain data (market info, positions) from GMX contracts. While this is an external data source, the use of structured types (e.g., uint256, address) and the lack of natural language processing on these inputs effectively mitigates risks of indirect prompt injection.
Audit Metadata