limit-order-fast
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
fast-limit-order.shshell script which uses standard system tools likecurl,jq, andbc, along with the Foundrycastsuite to sign and broadcast blockchain transactions. - [EXTERNAL_DOWNLOADS]: The skill communicates with KyberSwap vendor infrastructure (
limit-order.kyberswap.comandtoken-api.kyberswap.com) to retrieve token metadata, market prices, and transaction signing payloads. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the KyberSwap Token and Limit Order APIs. (1) Ingestion points: Token metadata and order parameters from KyberSwap APIs. (2) Boundary markers: Requires explicit verbal confirmation from the user before script execution. (3) Capability inventory: Performs blockchain transactions, signs EIP-712 messages, and submits limit orders. (4) Sanitization: Validates numerical amounts and Ethereum addresses using regex in the bash script.
Audit Metadata