meteora-dlmm-pool-screening
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches pool data and protocol metrics from public Meteora API endpoints (pool-discovery-api.datapi.meteora.ag and dlmm.datapi.meteora.ag). These are official endpoints for a well-known DeFi service.\n- [COMMAND_EXECUTION]: Instructions involve running a bundled Python script (screen.py) to process and rank the data. The script uses only standard library components and performs no unauthorized system changes or privileged operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external APIs, creating a potential injection surface. It mitigates these risks through explicit boundary instructions for the agent and a sanitization function in the screener script that filters control characters and markdown syntax from API-returned strings.
Audit Metadata