sorin-skill
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The SKILL.md file contains a bash script designed to check for skill updates. This script utilizes common shell utilities including
curl,grep,awk, andstatto compare local and remote version strings. - [EXTERNAL_DOWNLOADS]: The version check routine performs a network request to
raw.githubusercontent.comto fetch a version manifest from the vendor's repository (okx/plugin-store). This is a read-only operation and does not execute remote code. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes data from an external DeFi gateway (
https://defi-tools-proxy.saharaa.info). - Ingestion points: Data enters the context via the
tokenTool,poolTool,chainTool,protocolTool, andprojectToolAPI endpoints defined inSKILL.md. - Boundary markers: The instructions do not define specific delimiters for the API response data, though it instructs the agent to summarize the output.
- Capability inventory: The skill performs network GET requests and returns text for the agent to analyze.
- Sanitization: There are no specific sanitization or escaping protocols described for the external content before it is processed by the agent.
Audit Metadata