position-manager

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches liquidity position data from the vendor's official API at earn-service.kyberswap.com. This network activity is documented, targeted to the provider's infrastructure, and necessary for the skill's primary functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API, creating a theoretical injection surface. 1. Ingestion points: API results from earn-service.kyberswap.com processed in SKILL.md. 2. Boundary markers: The skill instructs the agent to return the full JSON response exactly as received, providing structure but no specific delimiters. 3. Capability inventory: The skill is explicitly read-only and lacks capabilities for file modification, network exfiltration of local data, or command execution. 4. Sanitization: No explicit sanitization is performed on the API response content, though the read-only nature of the skill minimizes risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 11:37 PM