limit-order-fast
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
castcommand-line tool from the Foundry toolkit to interact with the blockchain. This includes querying token balances, checking contract allowances, and generating cryptographic signatures for EIP-712 messages. - [EXTERNAL_DOWNLOADS]: Interacts with KyberSwap's official infrastructure (
limit-order.kyberswap.com,token-api.kyberswap.com) to retrieve necessary configurations, verify token safety, and check market prices before order submission. - [DATA_EXFILTRATION]: Transmits the final signed limit order data to KyberSwap's order management API. This transmission is a core function of the skill and is directed to the vendor's trusted endpoints.
- [PROMPT_INJECTION]: Instructions include clear guidance for the agent to only use this 'fast' path upon explicit user request and to avoid inferring such intent from external data, mitigating potential indirect injection risks from untrusted token metadata or API responses.
Audit Metadata