quant-desk
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python analysis logic through desk.py. It uses standard library modules to process trading data and manages local state via a JSON file in the system temp directory. No arbitrary command execution or privilege escalation vectors were detected.
- [EXTERNAL_DOWNLOADS]: The skill retrieves trading and market data from Hyperliquid official API and the author Senpi discovery service. These network connections are required for the tool performance and target trusted or well-known infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from trading ledgers and cohort analysis APIs (ingestion points: hl_api.py, senpi_history.py). Boundary markers for data processing are absent, but capabilities are restricted to network requests and local file writes (capability inventory: hl_api.py, desk.py). Sanitization is achieved through JSON parsing and regex validation of wallet addresses (sanitization: present).
Audit Metadata