zap
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with official KyberSwap APIs (zap-api, earn-service, token-api) and CoinGecko to retrieve token metadata, safety status, and liquidity route information.
- [COMMAND_EXECUTION]: Executes
curlvia bash to perform POST requests to the KyberSwap Zap API for building transaction calldata. - [COMMAND_EXECUTION]: Uses the
castutility to perform on-chain calls for retrieving Uniswap V4 pool keys and tick spacing information. - [DYNAMIC_EXECUTION]: Utilizes
python3 -candbcfor deterministic wei calculations based on user-provided amounts and token decimals. - [INDIRECT_PROMPT_INJECTION]: Processes data from external APIs (pool details, route information, token safety status) which creates an attack surface for malicious data to influence agent behavior.
- Ingestion points: Data returned from
zap-api.kyberswap.com,token-api.kyberswap.com, andearn-service.kyberswap.comis interpolated into the agent context. - Boundary markers: Employs explicit human-in-the-loop confirmation prompts and structured markdown tables before building transactions.
- Capability inventory: Shell command execution capabilities via
curl,python3, andcasttools. - Sanitization: Implements specific validation logic to verify the
routerAddressand pool token pairs against user expectations before presenting results.
Audit Metadata