order-manager
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches order data from
https://limit-order.kyberswap.com/read-ks/api/v1/orders. This is a request to the official KyberSwap API, which is a well-known service associated with the skill's stated provider. - [COMMAND_EXECUTION]: The skill uses
python3 -cto convert large blockchain numbers (wei) into human-readable formats. These commands are localized to arithmetic operations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external API (order details) which is then interpolated into the agent's context for display and analysis.
- Ingestion points: Order details fetched via
WebFetchfromlimit-order.kyberswap.cominSKILL.md(Step 1). - Boundary markers: The skill explicitly requests the agent to "Return the full JSON response body exactly as received," though specific delimiters for the processed data are absent in the display templates.
- Capability inventory: The skill uses
python3for calculations andWebFetchfor API queries. - Sanitization: The skill performs basic address validation (zero address check) but relies on the API response for mathematical values without further sanitization before Python execution.
- [DYNAMIC_EXECUTION]: The skill generates and executes Python script snippets at runtime to handle wei-to-decimal conversions (
python3 -c "print({amount_wei} / 10**{decimals})"). This follows a standard template for financial calculations.
Audit Metadata