SushiSwap V3
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its core binary and the required onchainos CLI from trusted repositories under the 'okx' organization on GitHub. The installation scripts include mandatory SHA256 checksum verification to ensure the integrity of the downloaded files before execution.
- [COMMAND_EXECUTION]: To interact with the blockchain, the skill invokes the onchainos CLI. This is the intended behavior for performing wallet operations and contract calls. The skill implements a strict 'Live Trading Confirmation Protocol' that prevents unauthorized or autonomous on-chain writes without explicit user confirmation.
- [DATA_EXPOSURE]: Market data and swap quotes are fetched from the official SushiSwap API and public RPC endpoints. The skill's instructions explicitly warn the agent to treat API-returned calldata as untrusted and require a preview to be displayed to the user before any transaction is signed.
Audit Metadata