zap

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Communicates with official KyberSwap APIs (zap-api, earn-service, token-api) and CoinGecko to retrieve token metadata, safety status, and liquidity route information.
  • [COMMAND_EXECUTION]: Executes curl via bash to perform POST requests to the KyberSwap Zap API for building transaction calldata.
  • [COMMAND_EXECUTION]: Uses the cast utility to perform on-chain calls for retrieving Uniswap V4 pool keys and tick spacing information.
  • [DYNAMIC_EXECUTION]: Utilizes python3 -c and bc for deterministic wei calculations based on user-provided amounts and token decimals.
  • [INDIRECT_PROMPT_INJECTION]: Processes data from external APIs (pool details, route information, token safety status) which creates an attack surface for malicious data to influence agent behavior.
  • Ingestion points: Data returned from zap-api.kyberswap.com, token-api.kyberswap.com, and earn-service.kyberswap.com is interpolated into the agent context.
  • Boundary markers: Employs explicit human-in-the-loop confirmation prompts and structured markdown tables before building transactions.
  • Capability inventory: Shell command execution capabilities via curl, python3, and cast tools.
  • Sanitization: Implements specific validation logic to verify the routerAddress and pool token pairs against user expectations before presenting results.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 11:37 PM