@1390/woofi-bot
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to official WOOFi API endpoints (
api.woofi.com,sapi.woofi.com) to fetch market data, yields, and transaction payloads. These are well-known services associated with the protocol described in the skill. - [COMMAND_EXECUTION]: The skill includes Python scripts (
total_tvl.py,total_volume.py) that perform data aggregation. These scripts use standard libraries and do not execute arbitrary shell commands or access sensitive system resources. - [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration were found. The skill handles public blockchain data and user-provided wallet addresses for the purpose of querying protocol-specific information or building transactions for the user to sign.
- [PROMPT_INJECTION]: The instructions are focused on API documentation and usage patterns. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
Audit Metadata