blockfill-agent-execution
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides instructions for installing the
blockfillpackage and executing the trading daemon. - [EXTERNAL_DOWNLOADS]: The skill depends on the
blockfillPython package, which includes pre-compiled binary components for multiple platforms to handle order execution. - [CREDENTIALS_UNSAFE]: The skill handles sensitive API keys and secrets for Binance and OKX, managing their storage in a local configuration file (
~/.blockfill/config.toml) with restricted access. - [DATA_EXFILTRATION]: The skill mentions a hardcoded 'qtex' endpoint and API key within the binary for remote communication, and supports routing exchange traffic through a specified proxy service.
- [SAFE]: The observed behaviors align with the skill's stated purpose of facilitating crypto order execution and are attributed to the skill's vendor infrastructure.
Audit Metadata