@1826/woofi-swap-optimizer
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches real-time swap quotes and protocol fee data from well-known DeFi providers including WOOFi (woo.org), 1inch, 0x, and Paraswap.
- [COMMAND_EXECUTION]: Suggests utilizing bash to execute network requests for retrieving pricing data from external APIs.
- [PROMPT_INJECTION]: The skill ingests untrusted user input such as token symbols and amounts, which are subsequently used in API queries and execution steps.
- Ingestion points: User-provided token symbols, chain names, and swap amounts defined in the workflow (SKILL.md).
- Boundary markers: No specific delimiters are identified to separate user input from the rest of the prompt logic.
- Capability inventory: The skill has access to network utilities via web_fetch/bash and transaction capabilities via the wallet skill (SKILL.md).
- Sanitization: No explicit validation or filtering logic for user input strings is described in the skill instructions.
Audit Metadata