deepbook-predict
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
@mysten/deepbook-predictand@mysten/suivia npm. These are official packages maintained by the skill's author (Mysten Labs) for interacting with the Sui blockchain and DeepBook protocol. - [COMMAND_EXECUTION]: The documentation provides TypeScript examples for constructing and signing blockchain transactions. These operations are performed using standard client-side SDKs and do not involve execution of untrusted shell commands or remote scripts.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves fetching market data from a public oracle server (
https://predict-server.testnet.mystenlabs.com). This is a documented vendor endpoint used to retrieve dynamic market parameters like oracle IDs and expiry timestamps required for protocol interaction. The skill includes a verification checklist and specific rules for handling this data safely. - [DATA_EXPOSURE]: No hardcoded credentials or sensitive identifiers were found. Code examples use placeholders (e.g.,
/* your key */) for private keys, adhering to secure development practices.
Audit Metadata