order-manager

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches order data from https://limit-order.kyberswap.com/read-ks/api/v1/orders. This is a request to the official KyberSwap API, which is a well-known service associated with the skill's stated provider.
  • [COMMAND_EXECUTION]: The skill uses python3 -c to convert large blockchain numbers (wei) into human-readable formats. These commands are localized to arithmetic operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external API (order details) which is then interpolated into the agent's context for display and analysis.
  • Ingestion points: Order details fetched via WebFetch from limit-order.kyberswap.com in SKILL.md (Step 1).
  • Boundary markers: The skill explicitly requests the agent to "Return the full JSON response body exactly as received," though specific delimiters for the processed data are absent in the display templates.
  • Capability inventory: The skill uses python3 for calculations and WebFetch for API queries.
  • Sanitization: The skill performs basic address validation (zero address check) but relies on the API response for mathematical values without further sanitization before Python execution.
  • [DYNAMIC_EXECUTION]: The skill generates and executes Python script snippets at runtime to handle wei-to-decimal conversions (python3 -c "print({amount_wei} / 10**{decimals})"). This follows a standard template for financial calculations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 11:37 PM