The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill retrieves token definitions from a CloudFront-hosted CDN and fetches real-time quote data from several DEX aggregator APIs (ParaSwap, Odos, KyberSwap, 0x, and LI.FI). These sources are industry-standard for decentralized finance applications.\n- [COMMAND_EXECUTION]: The skill uses Python scripts to perform quote ranking and safety analysis. These scripts are executed via the bash tool with parameters defined by user intent.\n- [DATA_EXFILTRATION]: To obtain swap quotes and transaction data, the skill sends token addresses and amounts to external aggregator endpoints. This transmission is functional and restricted to the parameters necessary for the swap operations.\n- [PROMPT_INJECTION]: The skill processes untrusted data from external sources. Evidence chain: (1) Ingestion points: JSON responses from multiple DEX APIs and CloudFront in tokens.py and aggregators.py. (2) Boundary markers: Not present. (3) Capability inventory: bash for script execution and wallet_transfer for transaction signing. (4) Sanitization: The skill treats external data as structured JSON or numerical values, which mitigates natural language injection risk. Severity is assessed as SAFE given the structured nature of the data.

@432/meta-dex-aggregator