marlin-strategy

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's setup instructions involve downloading script files from the author's public GitHub repository (github.com/Senpi-ai/senpi-skills). This is a documented part of the installation process for this strategy.
  • [COMMAND_EXECUTION]: The README provides commands for managing the strategy lifecycle, including installing dependencies via npx and running the producer script as a detached background daemon using nohup and python3.
  • [CREDENTIALS_UNSAFE]: The strategy utilizes sensitive environment variables, specifically SENPI_AUTH_TOKEN and MARLIN_WALLET, which are required to interact with the trading platform's API and manage assets. These are used locally by the vendor's provided helper libraries.
  • [DATA_EXFILTRATION]: Analysis indicates that data transmission is restricted to pushing trade signals and calling market data tools via the vendor's provided SenpiClient wrapper.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 08:48 PM
Security Audit — agent-trust-hub — marlin-strategy