limit-order-fast

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the fast-limit-order.sh shell script which uses standard system tools like curl, jq, and bc, along with the Foundry cast suite to sign and broadcast blockchain transactions.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with KyberSwap vendor infrastructure (limit-order.kyberswap.com and token-api.kyberswap.com) to retrieve token metadata, market prices, and transaction signing payloads.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from the KyberSwap Token and Limit Order APIs. (1) Ingestion points: Token metadata and order parameters from KyberSwap APIs. (2) Boundary markers: Requires explicit verbal confirmation from the user before script execution. (3) Capability inventory: Performs blockchain transactions, signs EIP-712 messages, and submits limit orders. (4) Sanitization: Validates numerical amounts and Ethereum addresses using regex in the bash script.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 11:37 PM