kestrel-strategy
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/kestrel_config.pyutilizessubprocess.runto invoke themcportercommand-line utility. This is the platform's standard method for executing trading tools and fetching market data. The implementation uses a structured list of arguments, which prevents shell injection vulnerabilities. - [SAFE]: The skill uses environment variables (
KESTREL_WALLET,KESTREL_STRATEGY_ID) and configuration files for sensitive identifiers, which is consistent with the platform's security best practices. - [SAFE]: All external references and source links point to the vendor's (Senpi-ai) official GitHub repositories and domains, representing normal vendor functionality.
Audit Metadata