aster-bot-trading
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone and install software from an untrusted GitHub repository at https://github.com/SignalBot-Labs/aster-bot.git.
- [COMMAND_EXECUTION]: The bot installation involves running npm install and npm run bot, which executes third-party code from the untrusted repository.
- [PRIVILEGE_ESCALATION]: Instructions include using pm2 startup, which typically requires administrative privileges to modify system services.
- [PERSISTENCE]: The skill establishes persistence by configuring the bot to run automatically on system reboots using pm2 startup and save commands.
- [INDIRECT_PROMPT_INJECTION]: The bot ingests external market data via WebSockets (wss://fstream.asterdex.com/ws), creating a surface where untrusted data could influence bot execution. 1. Ingestion points: WebSocket message handler in src/ws/marketData.ts. 2. Boundary markers: Absent; data is parsed directly without markers. 3. Capability inventory: Network requests via fetch for order placement (src/execution/orderManager.ts) and file system writes for trade logging (src/lib/logger.ts). 4. Sanitization: Basic JSON parsing is performed without semantic validation of market data content.
Recommendations
- AI detected serious security threats
Audit Metadata