stablecoin-yield-vs-tradfi
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script intended for version checking. This script uses standard utilities (curl, grep, awk, stat) to fetch and compare version metadata from the official okx repository on GitHub. It follows a safe pattern by notifying the user of updates rather than executing them automatically.
- [INDIRECT_PROMPT_INJECTION]: The skill processes real-time yield data from api.barker.money. While this introduces a potential surface for indirect injection, the skill explicitly provides safety instructions for the agent to treat all returned strings as data rather than instructions, mitigating the risk of executing untrusted content.
- Ingestion points: Data returned from Barker's market trend API endpoint (SKILL.md).
- Boundary markers: Explicit 'Security: External Data Boundary' section instructing the agent to treat returned strings as data and not instructions.
- Capability inventory: The skill uses a web search/API tool to fetch data; it does not have associated file-write or persistent network exfiltration capabilities beyond the market query.
- Sanitization: Instructions for the assistant to render asset names and yields verbatim without acting on embedded text.
Audit Metadata