rwa-alpha
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text from news RSS feeds which could theoretically attempt to influence automated trading decisions. \n 1. Ingestion points:
rwa_alpha.pyvia thefetch_news_headlinesfunction. \n 2. Boundary markers: A mandatory 'Live Trading Confirmation Protocol' inSKILL.mdrequires explicit typed user confirmation for all live transactions. \n 3. Capability inventory: On-chain wallet access and token swapping via theonchainosCLI. \n 4. Sanitization: Signals are matched against a strict internal playbook using regex and a constrained LLM classification prompt. \n- [COMMAND_EXECUTION]: The skill performs local command execution to interact with blockchain infrastructure. Evidence inrwa_alpha.pyshows the script callingsubprocess.runon theonchainosCLI tool. \n- [EXTERNAL_DOWNLOADS]: The skill connects to several external services at runtime to fetch market intelligence. Evidence inrwa_alpha.pyandplugin.yamlincludes requests tonews.google.com,gamma-api.polymarket.com, andapi.anthropic.com. \n- [DYNAMIC_EXECUTION]: The script includes functionality to modify its own configuration file during setup. Evidence inrwa_alpha.pyshows the_save_config_to_diskfunction writing user settings back intoconfig.py.
Audit Metadata