@1247/orderly-data

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: Analysis of the skill instructions and code snippets revealed no malicious logic, persistence mechanisms, or obfuscated payloads.- [EXTERNAL_DOWNLOADS]: The skill interacts with external API endpoints hosted at data-api.orderly.network and api.orderly.org. These connections are necessary to retrieve the DeFi metrics described in the skill and target established service domains.- [PROMPT_INJECTION]: The skill acts as a bridge for ingesting external data from API responses, which constitutes a surface for indirect prompt injection. 1. Ingestion points: Data retrieved from the Orderly Network API endpoints listed in SKILL.md. 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore commands within the ingested data. 3. Capability inventory: The provided implementation is limited to performing network GET requests via the requests library; it does not include risky capabilities like shell command execution or local file system writes. 4. Sanitization: The provided code does not include explicit validation or sanitization of the API response content.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 04:44 AM
Security Audit — agent-trust-hub — @1247/orderly-data